https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 15:01:27 +0000 https://vulnerability.circl.lu/vuln/cve-2021-40690 <p><strong>Affected:</strong> Apache Software Foundation Apache Santuario</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the &#34;secureValidation&#34; property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Santuario</p> <p>All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the &#34;secureValidation&#34; property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.</p> https://vulnerability.circl.lu/vuln/cve-2021-40690 https://vulnerability.circl.lu/vuln/usn-5525-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libxml-security-java, Ubuntu:20.04:LTS: libxml-security-java</p> <p>It was discovered that Apache XML Security for Java incorrectly passed a configuration property when creating specific key elements. This allows an attacker to abuse an XPath Transform to extract sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libxml-security-java, Ubuntu:20.04:LTS: libxml-security-java</p> <p>It was discovered that Apache XML Security for Java incorrectly passed a configuration property when creating specific key elements. This allows an attacker to abuse an XPath Transform to extract sensitive information.</p> https://vulnerability.circl.lu/vuln/usn-5525-1