TI-2025-31123 CVE-2025-48995 · GHSA-gmhf-gg8w-jw42
SignXML's signature verification with HMAC is vulnerable to a timing attack
Priority LOW 36
SignXML is an implementation of the W3C XML Signature standard in Python.
XML-Security
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
XML-Security records in CISA KEVNo XML-Security vulnerabilities are listed in CISA KEV.
Records
2 records
TI-2025-31122 CVE-2025-48994 · GHSA-6vx8-pcwv-xhf4
SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack
Priority LOW 36
SignXML is an implementation of the W3C XML Signature standard in Python.