← CVE Intelligence

CVE-2020-36563

Weak hash (SHA-1) in github.com/RobotsAndPencils/go-saml PUBLISHED

Description (CNA)

XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control over the input.

Affected (CNA)

Vendor / productVersions
github.com/RobotsAndPencils/go-saml / github.com/RobotsAndPencils/go-samlaffected

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.