title: Weak hash (SHA-1) in github.com/RobotsAndPencils/go-saml
description: XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control over the input.
problem types: CWE 328: Use of Weak Hash
affected:
{
vendor: github.com/RobotsAndPencils/go-saml
product: github.com/RobotsAndPencils/go-saml
collectionURL: https://pkg.go.dev
packageName: github.com/RobotsAndPencils/go-saml
programRoutines:
name: AuthnRequest.Validate
name: NewAuthnRequest
name: NewSignedResponse
name: ServiceProviderSettings.GetAuthnRequest
defaultStatus: affected
}