HIGH7.5Packagist
GHSA-2g98-f9jv-w8c5robrichards/xmlseclibs XPath injection
Modified: 12/5/2024
package
pkg:packagist/robrichards/xmlseclibs
robrichards/xmlseclibs XPath injection
Modified: 12/5/2024
xmlseclibs: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption
Modified: 9/10/2026
robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation
Modified: 12/9/2025
Signature validation bypass in XmlSecLibs
Modified: 3/14/2024