MEDIUMPyPI
GHSA-6vx8-pcwv-xhf4· CVE-2025-48994, PYSEC-2026-1921SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack
Modified: 7/7/2026
package
PyPI/signxml
pkg:pypi/signxml
MEDIUMPyPI
GHSA-gmhf-gg8w-jw42· CVE-2025-48995, PYSEC-2026-1922SignXML's signature verification with HMAC is vulnerable to a timing attack
Modified: 7/7/2026
—PyPI
PYSEC-2026-1921· CVE-2025-48994, GHSA-6vx8-pcwv-xhf4SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack
Modified: 7/7/2026
—PyPI
PYSEC-2026-1922· CVE-2025-48995, GHSA-gmhf-gg8w-jw42SignXML's signature verification with HMAC is vulnerable to a timing attack
Modified: 7/7/2026