Skip to content
OpenAdvisories

Package · Packagist

robrichards/xmlseclibs

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.0
    CVE-2025-66578

    robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation

    xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Versions 3.1.3 contain an authentication bypass vulnerability due to a flaw in the libxml2 canonicalization process during document transformation. When libxml2’s canonical…

    robrichards xmlseclibs robrichards/xmlseclibs Packagist