Due to the behavior of encoding/xml, a crafted XML document may cause XML Digital Signature validation to be entirely bypassed, causing an unsigned document to appear signed.
{ "review_status": "REVIEWED", "url": "https://pkg.go.dev/vuln/GO-2020-0050" }