VendorsSimpleSAMLphpxml-securityall versions
Vulnerabilities

SimpleSAMLphp XML-security

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-32600
xml-security is Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption
Published 2026-03-13 · Analyzed
8.2EPSS 0.001
CVE-2023-49087
Validation of SignedInfo
Published 2023-11-30 · Modified
7.5EPSS 0.002