Xml-security (Simplesamlphp) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 132 known versions, newest CVE from 2026-03-16. Vendor: Simplesamlphp.

CVEs of Xml-security

• CVE-2026-32600 - CVSS 8.2 (high), 2026-03-16: xml-security is a library that implements XML signatures and encryption. Prior to versions 2.3.1 and 1.13.9, XML nodes encrypted with either aes-128-gcm,…
• CVE-2024-34580 - CVSS 5.3 (medium), 2024-06-26: Apache XML Security for C++ through 2.0.4 implements the XML Signature Syntax and Processing (XMLDsig) specification without protection against an SSRF…
• CVE-2023-49087 - CVSS 7.5 (high), 2023-11-30: xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verification that the hash value of the…