module = "github.com/russellhaering/goxmldsig"

description = """
An attacker can craft a malformed XML Digital Signature which when
validated causes a panic due to nil pointer deference.
"""

cve = "CVE-2020-7711"

credit = "@stevenjohnstone"

symbols = ["ValidationContext.validateSignature"]

[[versions]]
fixed = "v1.1.0"

[[additional_packages]]
module = "github.com/russellhaering/gosaml2"
symbols = ["SAMLServiceProvider.validateAssertionSignatures"]
[[additional_packages.versions]]
fixed = "v0.6.0"

[links]
context = ["https://github.com/russellhaering/goxmldsig/issues/48", "https://github.com/russellhaering/gosaml2/issues/59"]