- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 8
- Registry
- Maven Central
Advisories 8
- CVE-2023-44483Unrated
Apache Santuario: Private Key disclosure in debug-log output
Affected: from 2.3.0, fixed in 2.3.4; fixed in 2.2.6; from 3.0.0, fixed in 3.0.3.
- CVE-2021-40690Unrated
Bypass of the secureValidation property
Affected: from 2.2.0, fixed in 2.2.3; fixed in 2.1.7.
- CVE-2019-12400Unrated
In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a…
Affected: from 2.0.3, fixed in 2.1.4.
- CVE-2014-8152Unrated
Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection…
Affected: from 2.0.0, fixed in 2.0.3.
- CVE-2013-4517Unrated
Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service…
Affected: fixed in 1.5.6.
- CVE-2013-5823Unrated
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and…
Affected: from 1.4.0, fixed in 1.4.8; from 1.5.0, fixed in 1.5.3.
- CVE-2013-2172Unrated
jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before…
Affected: from 1.4.0, fixed in 1.4.8; from 1.5.0, fixed in 1.5.5.
- CVE-2009-0217Unrated
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle…
Affected: from 1.4.0, fixed in 1.4.3.