Xmlseclibs Project Xmlseclibs
3 CVEs affecting Xmlseclibs Project Xmlseclibs. Latest disclosed: 2026-03-16. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-3465 | High | 8.8 | 2019-11-07 | Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML… |
CVE-2026-32313 | High | 8.2 | 2026-03-16 | xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Prior to 3.1.5, XML nodes encrypted with either aes-128-gcm, aes-192-gcm… |
CVE-2025-66578 | Medium | 6.0 | 2025-12-09 | xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Versions 3.1.3 contain an authentication bypass vulnerability due to a f… |