GO-2022-0409

An attacker can create an XML file which completely bypasses signature validation, passing off an altered file as a signed one...