CVE-2025-29775

xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability in versions prior to 6.0.1, 3.2.1, and 2.1.6 to bypass authentication or authorization mechanisms in systems that rely on xml-crypto for verifying signed XML documents. The vulnerability allows an attacker to modify a valid signed XML message in a way that still passes signature verification checks. For example, it could be used to alter critical identity or access control attributes, enabling an attacker to escalate privileges or impersonate another user. Users of versions 6.0.0 and prior should upgrade to version 6.0.1 to receive a fix. Those who are still using v2.x or v3.x should upgrade to patched versions 2.1.6 or 3.2.1, respectively.

• CWE-347

• https://github.com/node-saml/xml-crypto/commit/28f92218ecbb8dcbd238afa4efbbd50302aa9aed
• https://github.com/node-saml/xml-crypto/commit/886dc63a8b4bb5ae1db9f41c7854b171eb83aa98
• https://github.com/node-saml/xml-crypto/commit/8ac6118ee7978b46aa56b82cbcaa5fca58c93a07
• https://github.com/node-saml/xml-crypto/releases/tag/v2.1.6
• https://github.com/node-saml/xml-crypto/releases/tag/v3.2.1
• https://github.com/node-saml/xml-crypto/releases/tag/v6.0.1
• https://github.com/node-saml/xml-crypto/security/advisories/GHSA-x3m8-899r-f7c3
• https://workos.com/blog/samlstorm

Published

Mar 14, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-2977A vulnerability was found in GFI KerioConnect 10.0.6. It has…5.4
• CVE-2025-29770vLLM is a high-throughput and memory-efficient inference and…6.5
• CVE-2025-29771HtmlSanitizer is a client-side HTML Sanitizer. Versions prio…5.3
• CVE-2025-29772OpenEMR is a free and open source electronic health records …6.1
• CVE-2025-29773Froxlor is open-source server administration software. A vul…7.8
• CVE-2025-29774xml-crypto is an XML digital signature and encryption librar…9.3
• CVE-2025-29776Azle is a WebAssembly runtime for TypeScript and JavaScript …8.7
• CVE-2025-29778Kyverno is a policy engine designed for cloud native platfor…8
• CVE-2025-29779Post-Quantum Secure Feldman's Verifiable Secret Sharing prov…5.4
• CVE-2025-2978A vulnerability was found in WCMS 11. It has been rated as c…9.8
• CVE-2025-29780Post-Quantum Secure Feldman's Verifiable Secret Sharing prov…5.8
• CVE-2025-29781The Bare Metal Operator (BMO) implements a Kubernetes API fo…6.5