CVE-2026-9487

Versions of the XML::Sig Perl module prior to 0.71 are vulnerable to signature wrapping due to an improper handling of duplicate IDs. The root cause resides in the _get_signed_xml() function within lib/XML/Sig.pm, which resolves the SignedInfo Reference/@URI to a node using the XPath expression /...

CVE-2026-9487 XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID

XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. getsignedxml in lib/XML/Sig.pm, called from verify, resolves the SignedInfo Reference/@URI to a node with the XPath expression "//@ID='$id'" and returns the first node of the resulting node set. A document in which...

CVE-2026-9487

XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. getsignedxml in lib/XML/Sig.pm, called from verify, resolves the SignedInfo Reference/@URI to a node with the XPath expression "//@ID='$id'" and returns the first node of the resulting node set. A document in which...