Login Request a demo
XM
Product
xml-crypto
by node-saml · last CVE Mar 14, 2025
3
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 3High 0Medium 0Low 0
Severity
All severities3Critical3High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add xml-crypto to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-32962
10.0
1%
May 2
XML signature verification bypass due improper verification of signature / signature spoofing
Affected: >= 4.0.0, < 6.0.0
CVE-2025-29775
9.3
10%
Mar 14
xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
Affected: >= 4.0.0, < 6.0.1; >= 3.0.0, < 3.2.1; < 2.1.6
CVE-2025-29774
9.3
9%
Mar 14
xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References
Affected: >= 4.0.0, < 6.0.1; >= 3.0.0, < 3.2.1; < 2.1.6
Showing 3