Moov Signedxml: Unauthenticated Denial Of Service In Exclusive XML Canonicalization

Exclusive XML canonicalization "http://www.w3.org/2001/10/xml-exc-c14n" in "github.com/moov-io/signedxml" copied the entire accumulated namespace map at every node during "ValidateReferences", before any reference digest or signature check. For a chain of nested elements that each declare many...