Xmlseclibs Project

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 3
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    1
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-32313

    xmlseclibs is Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption

    Last Modified: Mar 23, 2026
    Published: Mar 13, 2026

    CVE-2025-66578

    robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation

    Last Modified: Dec 11, 2025
    Published: Dec 09, 2025

    CVE-2019-3465

    Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message.

    Last Modified: Nov 21, 2024
    Published: Nov 07, 2019
    Items Per Page
    Xmlseclibs_Project Vulnerabilities & Security CVEs | CVE-DB