CVE-2026-93570

Szafir and Szafir Weryfikująca are vulnerable to XML External Entity XXE injection. When a user signs or verify a crafted XML file containing a DOCTYPE with an external DTD reference, the parser processes external entities, allowing an attacker to read arbitrary files from the victim's filesystem...