HIGH8.2Packagist
GHSA-r353-4845-pr5p· CVE-2026-32600simplesamlphp/xml-security: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption
Modified: 3/16/2026
package
pkg:packagist/simplesamlphp/xml-security
simplesamlphp/xml-security: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption
Modified: 3/16/2026
Validation of SignedInfo
Modified: 9/10/2026