{"id":"ghsa-ghsa-5588-rp99-5fjh","seq":32752,"kind":"advisory","title":"Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization","url":"https://github.com/advisories/GHSA-5588-rp99-5fjh","permalink":"https://vulnpulse.app/items/ghsa-ghsa-5588-rp99-5fjh","summary":"影響: go:github.com/moov-io/signedxml <= 1.4.0 → 1.4.1\nExclusive XML canonicalization (http://www.w3.org/2001/10/xml-exc-c14n#) in github.com/moov-io/signedxml copied the entire accumulated namespace map at every node during ValidateReferences(), before any reference digest or signature check. For a chain of nested elements that each declare many unused namespace prefixes, that produced O(m × depth²) time and peak memory (m = prefixes per level). beevik/etree caps tree depth (~1024), but m is unbounded, so a small attacker-controlled document (on t…","severity":"high","techs":["go","github"],"cves":["CVE-2026-113729"],"tags":["GHSA-5588-rp99-5fjh","github.com/moov-io/signedxml"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-21T16:27:55.000Z","fetched_at":"2026-10-21T18:28:52.985Z"}