vulnerability in PyTrustNFe project

[ankitdn]

While working on the PyTrustNFe project, we discovered a signature verification vulnerability in the Python library SignXML(this dependency used by PyTrustNFe), tracked as CVE-2025-48994. SignXML is commonly used for generating and verifying XML signatures in secure data transmission workflows. Attacker could craft a signature using an unexpected asymmetric algorithm
CVE Link
CVE Report