HTTP/2 200 server: Apache last-modified: Fri, 20 Oct 2023 06:42:22 GMT etag: "3c35-608202cba8b5d-gzip" content-encoding: gzip access-control-allow-origin: * content-security-policy: default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/ ; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/ ; style-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/ ; frame-ancestors 'self'; frame-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://*.scarf.sh/ ; worker-src 'self' data: blob:; content-type: text/html via: 1.1 varnish, 1.1 varnish accept-ranges: bytes age: 0 date: Thu, 25 Dec 2025 14:47:44 GMT x-served-by: cache-hel1410032-HEL, cache-bom-vanm7210049-BOM x-cache: HIT, MISS x-cache-hits: 3, 0 x-timer: S1766674064.169496,VS0,VE146 vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains; preload content-length: 3432

		Apache Santuario Index > secadv
		Apache Santuario Home Download Security Advisories FAQ Team Contributing Mailing Lists SVN Issue Tracking License History Old News Java Index Download Release Notes Source repository FAQ API Streaming API Interoperability C++ Index Download Release Notes Source repository Installation FAQ Tools Programming Credits ASF How Apache Works Foundation Sponsor Apache Thanks For information on how to report a new security problem please see here. The following security advisories have been issued in connection with the Santuario Project. 2023 CVE-2023-44483: Apache Santuario: Private Key disclosure in debug-log output 2021 CVE-2021-40690: Bypass of the secureValidation property 2019 CVE-2019-12400: Apache Santuario potentially loads XML parsing code from an untrusted source 2014 CVE-2014-8152: Streaming XML Signature verification failure 2013 CVE-2013-4517: Java XML Signature DoS Attack CVE-2013-2210: Apache Santuario XML Security for C++ contains a heap overflow during XPointer evaluation CVE-2013-2172: Java XML Signature spoofing attack CVE-2013-2153: Apache Santuario XML Security for C++ contains an XML Signature Bypass issue CVE-2013-2154: Apache Santuario XML Security for C++ contains a stack overflow during XPointer evaluation CVE-2013-2155: Apache Santuario XML Security for C++ contains denial of service and hash length bypass issues while processing HMAC signatures CVE-2013-2156: Apache Santuario XML Security for C++ contains heap overflow while processing InclusiveNamespace PrefixList 2011 CVE-2011-2516: Apache Santuario XML Security for C++ contains buffer overflows signing or verifying with large keys.
		(edit page) (add comment) Apache Santuario, Apache, the Apache feather logo are trademarks of The Apache Software Foundation. All other marks mentioned may be trademarks or registered trademarks of their respective owners.