robrichards/xmlseclibs
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| xmlseclibs: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption | robrichards/xmlseclibs | Composer | High | Fix reported | |
| robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation | robrichards/xmlseclibs | Composer | Medium | Fix reported | |
| robrichards/xmlseclibs XPath injection | robrichards/xmlseclibs | Composer | High | Fix reported | |
| Signature validation bypass in XmlSecLibs | robrichards/xmlseclibs | Composer | High | Fix reported |