CRITICAL10.0npm
GHSA-2xp3-57p7-qf4v· CVE-2024-32962xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing
Modified: 9/10/2026
package
npm/xml-crypto
pkg:npm/xml-crypto
CRITICALnpm
GHSA-9p8x-f768-wp2g· CVE-2025-29774xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References
Modified: 9/10/2026
HIGHnpm
GHSA-c27r-x354-4m68xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion
Modified: 8/2/2022
CRITICALnpm
GHSA-x3m8-899r-f7c3· CVE-2025-29775xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
Modified: 9/10/2026