Skip to content
OpenAdvisories

Package · Packagist

simplesamlphp/xml-security

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2026-32600

    xml-security is Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption

    xml-security is a library that implements XML signatures and encryption. Prior to versions 2.3.1 and 1.13.9, XML nodes encrypted with either aes-128-gcm, aes-192-gcm, or aes-256-gcm lack validation of the authentication tag length. An attacker can use this to…

    simplesamlphp xml-security simplesamlphp/xml-security Packagist
  • Medium 6.8
    CVE-2023-49087

    Validation of SignedInfo

    xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verification that the hash value of the related XML-document matches a specific DigestValue-value, but also that the cryptographic signature on th…

    simplesamlphp xml-security simplesamlphp/saml2 simplesamlphp/xml-security Packagist