agentprime: timlegge-xml-sigEvery new CVE for timlegge-xml-sig.https://agentprime.io/CVE-2026-18568: XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic checkhttps://agentprime.io/advisories/CVE-2026-18568/https://agentprime.io/advisories/CVE-2026-18568/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 14:38:52 GMTCVECVE-2026-9487: XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate IDhttps://agentprime.io/advisories/CVE-2026-9487/https://agentprime.io/advisories/CVE-2026-9487/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 13:14:43 GMTCVEcriticalCVE-2026-9390: XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookuphttps://agentprime.io/advisories/CVE-2026-9390/https://agentprime.io/advisories/CVE-2026-9390/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 13:09:40 GMTCVEcriticalCVE-2025-40934: XML-Sig prior to 0.68 for Perl improperly validates XML without signatureshttps://agentprime.io/advisories/CVE-2025-40934/https://agentprime.io/advisories/CVE-2025-40934/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Nov 2025 22:34:33 GMTCVEcritical