xmlseclibs vulnerabilities

CVEs whose affected-version data names the xmlseclibs package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-66578Medium· 6.0

10mo ago

xmlseclibs is a library written in PHP for working with XML Encryption and Signatures

xmlseclibs is a library written in PHP for working with XML Encryption and Signatures. Versions 3.1.3 contain an authentication bypass vulnerability due to a flaw in the libxml2 canonicalization process during document transformation. Wh…

▾ Sunlitxmlseclibs_project · xmlseclibsEPSS 0.24%via NVD