Apache Santuario XML Security for Java before 1.5.6 when applying Transforms allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs) related to signatures.