Project Zero: Gregor Samsa: Exploiting Java's XML Signature Verification

https://googleprojectzero.blogspot.com/2022/11/gregor-samsa-exploiting-java-xml.html

https://twitter.com/home/status/1587979903093248002

https://twitter.com/home/status/1588015708658466816

https://twitter.com/home/status/1588030191078899719

https://twitter.com/home/status/1588049558604419074

https://twitter.com/home/status/1588065210526760960

https://twitter.com/home/status/1588120061381844993

https://twitter.com/home/status/1588289145738248201