New: Corgea AI Pentesting — autonomous penetration testing in hours, not weeks
Start for Free
npm

xml-crypto

View on npm registry
4 Total advisories
4 Vulnerabilities
0 Malware

Vulnerabilities

UNKNOWN
npm

CVE-2025-29774

xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References
UNKNOWN
npm

CVE-2025-29775

xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
CRITICAL 10.0
npm

CVE-2024-32962

xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing
UNKNOWN
npm

GHSA-c27r-x354-4m68

xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes