XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control over the input.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/RobotsAndPencils/go-saml(Go) | 0 | N/A | N/A |
CVSS Metrics