Moov Signedxml: Unauthenticated Denial Of Service In Exclusive XML Canonicalization

Exclusive XML canonicalization "http://www.w3.org/2001/10/xml-exc-c14n" in "github.com/moov-io/signedxml" copied the entire accumulated namespace map at every node during "ValidateReferences", before any reference digest or signature check. For a chain of nested elements that each declare many...

GHSA-5588-RP99-5FJH Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization

Exclusive XML canonicalization http://www.w3.org/2001/10/xml-exc-c14n in github.com/moov-io/signedxml copied the entire accumulated namespace map at every node during ValidateReferences, before any reference digest or signature check. For a chain of nested elements that each declare many unused...

Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization

Exclusive XML canonicalization http://www.w3.org/2001/10/xml-exc-c14n in github.com/moov-io/signedxml copied the entire accumulated namespace map at every node during ValidateReferences, before any reference digest or signature check. For a chain of nested elements that each declare many unused...