xmlseclibs vulnerabilities

2 known vulnerabilities in xmlseclibs from Robrichards. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  xmlseclibs: Improper Validation of Integrity Check Value

  CVE-2026-32313Mar 16, 2026Robrichards

  xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Prior to 3.1.5, XML nodes encrypted with either aes-128-gcm, aes-192-gcm, or aes-256-gcm lack validation of the authentication tag length. An attacker can use this to brute-

• 7.5 High severity

  xmlseclibs: Uncaught Exception

  CVE-2025-66578Dec 9, 2025Robrichards

  xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Versions 3.1.3 contain an authentication bypass vulnerability due to a flaw in the libxml2 canonicalization process during document transformation. When libxml2’s canonicali