SignXML's signature verification with HMAC is vulnerable to a timing attack
Moderate severity
GitHub Reviewed
Published
Jun 1, 2025
in
XML-Security/signxml
•
Updated Jun 5, 2025
Give feedback on Dependabot alerts