pypi
Moderate Security Advisories for https://github.com/XML-Security/signxml in pypi Clear Filters
Moderate
about 1 year ago
SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack
pypi
signxml
Moderate
about 1 year ago
SignXML's signature verification with HMAC is vulnerable to a timing attack
pypi
signxml
Filter by Severity
Filter by Package
tensorflow
200
tensorflow-cpu
189
tensorflow-gpu
184
apache-airflow
69
open-webui
62
apache-superset
47
Django
44
pypdf
38
picklescan
33
plone
29
vllm
29
nova
29
ansible
27
moin
27
aiohttp
26
Plone
23
django
22
wagtail
22
gradio
21
matrix-synapse
21
pyload-ng
20
keystone
17
salt
17
rdiffweb
16
weblate
16
vyper
15
glance
14
transformers
13
mistune
13
mlflow
12
PraisonAI
12
roundup
12
OctoPrint
12
horizon
11
ckan
11
nicegui
11
mobsf
11
notebook
10
onionshare-cli
10
PaddlePaddle
10
praisonaiagents
10
vantage6
9
indico
9
urllib3
9
calibreweb
9
openssl-encrypt
9
pyftpdlib
9
neutron
9
pip
8
django-cms
8
pillow
8
copyparty
8
nltk
8
pgadmin4
8
opencv-python
8
tornado
8
opencv-contrib-python
8
modoboa
8
lemur
8
requests
7
zenml
7
twisted
7
ironic
7
OpenEXR
7
Pillow
7
trytond
7
cryptography
7
web2py
6
jupyterhub
6
wger
6
swift
6
lxml
6
Mezzanine
6
cinder
6
changedetection.io
6
jupyter-server
6
aim
6
hermes-agent
6
Flask-AppBuilder
6
ethyca-fides
6
keras
6
metagpt
6
jupyterlab
5
jwcrypto
5
Weblate
5
trac
5
dtale
5
mayan-edms
5
langflow
5
authlib
5
mindsdb
5
bleach
5
copier
5
nautobot
5
zeroconf
5
mage-ai
5
cobbler
5
justhtml
5
agentscope
5
lollms
5
Scrapy
4
local-deep-research
4
starlette
4
codechecker
4
lief
4
asyncssh
4
Keystone
4
mcp-server-git
4
matrix-sydent
4
paddlepaddle
4
PyPDF2
4
Products.CMFPlone
4
jinja2
4
rucio-webui
4
tendenci
4
litellm
4
sentry
4
python-ldap
4
omero-web
4
streamlit
4
ha-mcp
4
snowflake-connector-python
4
ansible-core
4
werkzeug
4
tuf
4
glances
4
composio-core
4
flask-cors
4
bbot
4
label-studio
4
onnx
4
mailman
4
waitress
4
GitPython
4
sqlparse
4
zope
4
django-unicorn
3
fschat
3
llama-index-core
3
markdown2
3
torch
3
AccessControl
3
litestar
3
pydantic-ai-slim
3
ipython
3
mercurial
3
micropython-copy
3
kiwitcms
3
graphite-web
3
praisonai-platform
3
keylime
3
opencv-python-headless
3
fickling
3
eventlet
3
opencv-contrib-python-headless
3
scrapy
3
django-allauth
3
fastmcp
3
inventree
3
datasette
3
numpy
3
frappe
3
saleor
3
eml_parser
3
uv
3
khoj
3
Werkzeug
3
langchain-core
3
ujson
3
wasmtime
3
rembg
3
Moin
3
nbconvert
3
pretix
3
yt-dlp
3
FreeTAKServer-UI
3
strawberry-graphql
3
aws-sam-cli
3
Flask-Security-Too
3
whoogle-search
3
pydantic-ai
3
buildbot
3
homeassistant
3
fava
3
wasmtime
3
micropython-io
3
feedparser
3
flask-appbuilder
3
Jinja2
3
nono-py
3
webob
3
djangorestframework
3
ajenti
3
awscli
3
motioneye
3
bugsink
3
pysaml2
3
barbican
3
langgraph-checkpoint
2
ryu
2
Filter by Repository
https://github.com/tensorflow/tensorflow
200
https://github.com/django/django
50
https://github.com/apache/airflow
44
https://github.com/mmaitre314/picklescan
30
https://github.com/ansible/ansible
26
https://github.com/plone/Products.CMFPlone
20
https://github.com/openstack/nova
18
https://github.com/gradio-app/gradio
16
https://github.com/ikus060/rdiffweb
16
https://github.com/matrix-org/synapse
16
https://github.com/vyperlang/vyper
15
https://github.com/PaddlePaddle/Paddle
14
https://github.com/saltstack/salt
14
https://github.com/openstack/keystone
12
https://github.com/huggingface/transformers
12
https://github.com/vllm-project/vllm
10
https://github.com/aio-libs/aiohttp
10
https://github.com/urllib3/urllib3
9
https://github.com/dpgaspar/Flask-AppBuilder
9
https://github.com/OctoPrint/OctoPrint
9
https://github.com/pyload/pyload
8
https://github.com/modoboa/modoboa
8
https://github.com/onionshare/onionshare
8
https://github.com/ckan/ckan
8
https://github.com/apache/superset
8
https://github.com/openstack/glance
8
https://github.com/py-pdf/pypdf
7
https://github.com/MobSF/Mobile-Security-Framework-MobSF
7
https://github.com/openstack/horizon
7
https://github.com/python-pillow/Pillow
7
https://github.com/janeczku/calibre-web
7
https://github.com/opencv/opencv
7
https://github.com/jupyter/notebook
7
https://github.com/scrapy/scrapy
7
https://github.com/zenml-io/zenml
7
https://github.com/psf/requests
6
https://github.com/lxml/lxml
6
https://github.com/giampaolo/pyftpdlib
6
https://github.com/twisted/twisted
6
https://github.com/roundup-tracker/roundup
6
https://github.com/vantage6/vantage6
6
https://github.com/wagtail/wagtail
6
https://github.com/run-llama/llama_index
6
https://github.com/pallets/jinja
6
https://github.com/ethyca/fides
5
https://github.com/mlflow/mlflow
5
https://github.com/pgadmin-org/pgadmin4
5
https://github.com/indico/indico
5
https://github.com/9001/copyparty
5
https://github.com/langchain-ai/langchain
5
https://github.com/element-hq/synapse
4
https://github.com/getsentry/sentry
4
https://github.com/man-group/dtale
4
https://github.com/Ericsson/codechecker
4
https://github.com/matrix-org/sydent
4
https://github.com/openstack/cinder
4
https://github.com/python-ldap/python-ldap
4
https://github.com/ComposioHQ/composio
4
https://github.com/Pylons/waitress
4
https://github.com/corydolphin/flask-cors
4
https://github.com/pallets/werkzeug
4
https://github.com/jupyter-server/jupyter_server
4
https://github.com/lief-project/LIEF
4
https://github.com/pypa/pip
4
https://github.com/latchset/jwcrypto
4
https://github.com/cobbler/cobbler
4
https://github.com/tornadoweb/tornado
4
https://github.com/streamlit/streamlit
4
https://github.com/HumanSignal/label-studio
4
https://github.com/pyca/cryptography
4
https://github.com/snowflakedb/snowflake-connector-python
4
https://github.com/benbusby/whoogle-search
3
https://github.com/aws/aws-sam-cli
3
https://github.com/eventlet/eventlet
3
https://github.com/beancount/fava
3
https://github.com/FreeTAKTeam/UI
3
https://github.com/frappe/frappe
3
https://github.com/simonw/datasette
3
https://github.com/mozilla/bleach
3
https://github.com/WeblateOrg/weblate
3
https://github.com/graphite-project/graphite-web
3
https://sourceforge.net/projects/sourceforge.net
3
https://github.com/ipython/ipython
3
https://github.com/aimhubio/aim
3
https://github.com/mlc-ai/xgrammar
3
https://github.com/ome/omero-web
3
https://github.com/micropython/micropython
3
https://github.com/dgtlmoon/changedetection.io
3
https://gitlab.com/mayan-edms/mayan-edms
3
https://github.com/zopefoundation/AccessControl
3
https://github.com/octoprint/octoprint
3
https://github.com/nautobot/nautobot
3
https://github.com/openstack/swift
3
https://github.com/Exiv2/exiv2
3
https://github.com/mindsdb/mindsdb
3
https://github.com/AcademySoftwareFoundation/openexr
3
https://github.com/jupyterlab/jupyterlab
3
https://github.com/bytecodealliance/wasmtime
3
https://github.com/khoj-ai/khoj
3
https://github.com/Cog-Creators/Red-DiscordBot
3
https://github.com/numpy/numpy
3
https://github.com/BerriAI/litellm
3
https://github.com/stephenmcd/mezzanine
3
https://github.com/saleor/saleor
3
https://github.com/open-webui/open-webui
2
https://github.com/jrspruitt/ubi_reader
2
https://github.com/djblets/djblets
2
https://github.com/parisneo/lollms
2
https://github.com/lepture/mistune
2
https://github.com/inveniosoftware/invenio-communities
2
https://github.com/fastapi-admin/fastapi-admin
2
https://github.com/AcademySoftwareFoundation/MaterialX
2
https://github.com/wasm3/wasm3
2
https://github.com/geyang/ml-logger
2
https://github.com/goToMain/libosdp
2
https://github.com/IdentityPython/pysaml2
2
https://github.com/facebookresearch/ParlAI
2
https://github.com/archivy/archivy
2
https://github.com/encode/starlette
2
https://github.com/SiCKRAGE/SiCKRAGE
2
https://github.com/jupyterhub/jupyterhub
2
https://github.com/faucetsdn/ryu
2
https://github.com/aio-libs/aiosmtpd
2
https://github.com/labd/wagtail-2fa
2
https://github.com/inventree/InvenTree
2
https://github.com/DavidOsipov/PostQuantum-Feldman-VSS
2
https://github.com/ansible/ansible-runner
2
https://github.com/web2py/web2py
2
https://github.com/InternLM/lmdeploy
2
https://github.com/dagster-io/dagster
2
https://github.com/python-social-auth/social-app-django
2
https://github.com/jhpyle/docassemble
2
https://github.com/openstack/neutron
2
https://github.com/modelscope/ms-swift
2
https://github.com/zopefoundation/Zope
2
https://github.com/OpenZeppelin/cairo-contracts
2
https://github.com/sosreport/sos
2
https://github.com/yt-dlp/yt-dlp
2
https://github.com/pretix/pretix
2
https://github.com/httpie/httpie
2
https://github.com/plone/Products.ATContentTypes
2
https://github.com/theupdateframework/tuf
2
https://github.com/keylime/keylime
2
https://github.com/XML-Security/signxml
2
https://github.com/html5lib/html5lib-python
2
https://github.com/bbangert/beaker
2
https://github.com/keras-team/keras
2
https://github.com/nexB/scancode.io
2
https://github.com/ethereum/eth-abi
2
https://github.com/ietf-tools/xml2rfc
2
https://github.com/home-assistant/core
2
https://github.com/erdogant/pypickle
2
https://github.com/devsnd/cherrymusic
2
https://github.com/ronf/asyncssh
2
https://github.com/moinwiki/moin-1.9
2
https://github.com/saghul/pycares
2
https://github.com/adamghill/django-unicorn
2
https://github.com/trentm/python-markdown2
2
https://github.com/jlowin/fastmcp
2
https://github.com/cure53/DOMPurify
2
https://github.com/mongodb/mongo-python-driver
2
https://github.com/httplib2/httplib2
2
https://github.com/tryton/trytond
2
https://github.com/blacklanternsecurity/bbot
2
https://github.com/astral-sh/uv
2
https://github.com/pytorch/pytorch
1
https://github.com/mopemope/meinheld
1
https://github.com/Bouke/django-user-sessions
1
https://github.com/tm-kn/django-basic-auth-ip-whitelist
1
https://github.com/openssl/openssl
1
https://github.com/marimo-team/marimo
1
https://github.com/Eugeny/ajenti
1
https://github.com/onnx/onnx
1
https://github.com/qutebrowser/qutebrowser
1
https://github.com/Cog-Creators/Red-Dashboard
1
https://github.com/reviewboard/reviewboard
1
https://github.com/Wallvon/mofh
1
https://github.com/cetinpy/CVE-2024-50633
1
https://github.com/huggingface/text-generation-inference
1
https://github.com/nmslib/hnswlib
1
https://github.com/tabatkins/bikeshed
1
https://github.com/aws/sagemaker-python-sdk
1
https://github.com/pulp/pulp_ansible
1
https://github.com/RDFLib/pyrdfa3
1
https://github.com/shenhav12/CVE-2024-25170-Mezzanine-v6.0.0
1
https://svn.apache.org/viewvc/libcloud
1
https://github.com/collective/collective.dms.basecontent
1
https://github.com/pallets/flask
1
https://github.com/kevinpdicks/Mezzanine-CMS-6.1.0-XSS
1
https://github.com/benoitc/restkit
1
https://github.com/RasaHQ/rasa-pro-security-advisories
1
https://github.com/jquery/jquery
1
https://github.com/spotipy-dev/spotipy
1
https://github.com/feiskyer/mcp-kubernetes-server
1
https://github.com/LearningCircuit/local-deep-research
1
https://github.com/jupyterhub/dockerspawner
1
https://github.com/django-cms/django-cms
1
https://github.com/tankywoo/simiki
1
https://github.com/dscho/hg
1