CVE-2026-113729

The Moov signedxml pure Go library (prior to version 1.4.1 ) is vulnerable to an unauthenticated denial of service in its ExclusiveCanonicalization function. The root cause is that exclusivecanonicalization.go copies the complete accumulated namespace map at every nested element before performing...