CVE-2020-36563 — Weak hash (SHA-1) in github.com/RobotsAndPencils/go-saml
XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control o…
Published: 2022-12-27 · CVSS: 5.3 · CVSS 3.1
XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control over the input.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7