ROOT-APP-NUGET-CVE-2026-26171 CVE-2026-26171 in System.Security.Cryptography.Xml - Patched by Root

Root has patched CVE-2026-26171 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via the EncryptedXml class. An attacker can cause excessive resource consumption by providing specially crafted XML input. Details XXE Injection is a type of attack against an application that parses XM...