What’s Vulnerable › Products

XML-Security signxml vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your XML-Security signxml version is affected

Latest XML-Security signxml vulnerabilities

• CVE-2025-48995 — SignXML's signature verification with HMAC is vulnerable to a timing attack (CVSS 6.9)
• CVE-2025-48994 — SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack (CVSS 6.9)