Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the CheckSignedInfoKeyedHashAlgorithm method of SignedXml, which compares only the first SignatureValue.Length bytes of the computed HMAC against the supplied signature value. An...