What’s Vulnerable › Products

Xml::Sig Project Xml::Sig vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Xml::Sig Project Xml::Sig version is affected

Latest Xml::Sig Project Xml::Sig vulnerabilities

• CVE-2026-18568 — XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic check (CVSS 7.5)
• CVE-2026-9487 — XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID (CVSS 9.1)
• CVE-2026-9390 — XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup (CVSS 9.1)
• CVE-2025-40934 — XML-Sig prior to 0.68 for Perl improperly validates XML without signatures (CVSS 9.3)