CyberSecBulletin

Robrichards vulnerabilities

We track 2 vulnerabilities in Robrichards products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 16, 2026.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Robrichards vulnerabilities

  • 8.2 High severity

    xmlseclibs: Improper Validation of Integrity Check Value

    CVE-2026-32313Robrichards

    xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Prior to 3.1.5, XML nodes encrypted with either aes-128-gcm, aes-192-gcm, or aes-256-gcm lack validation of the authentication tag length. An attacker can use this to brute-

  • 7.5 High severity

    xmlseclibs: Uncaught Exception

    CVE-2025-66578Robrichards

    xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Versions 3.1.3 contain an authentication bypass vulnerability due to a flaw in the libxml2 canonicalization process during document transformation. When libxml2’s canonicali