Lucene search
GoogleOSV:GO-2020-0047HistoryApr 14, 2021 - 8:04 p.m.
Weak hash (SHA-1) in github.com/RobotsAndPencils/go-saml
2021-04-1420:04:52
Google
osv.dev
10
0.001 Low
EPSS
Percentile
32.6%
XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control over the input.
Related
nvd
nvd
CVE-2020-36563
2022-12-28 03:15:09
cvelist
cvelist
CVE-2020-36563 Weak hash (SHA-1) in github.com/RobotsAndPencils/go-saml
2022-12-27 21:13:29
veracode
veracode
Hash Collision
2023-01-12 05:02:53
prion
prion
Input validation
2022-12-28 03:15:00
cve
cve
CVE-2020-36563
2022-12-28 03:15:09
osv
osv
go-saml's XML Digital Signatures use SHA-1
2022-12-28 03:30:28
github
github
go-saml's XML Digital Signatures use SHA-1
2022-12-28 03:30:28
gitlab
gitlab
Use of Weak Hash
2022-12-28 00:00:00