What’s Vulnerable › Products

robrichards xmlseclibs vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your robrichards xmlseclibs version is affected

Latest robrichards xmlseclibs vulnerabilities

• CVE-2026-32313 — xmlseclibs is Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption (CVSS 8.2)
• CVE-2025-66578 — robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation (CVSS 7.5)
• CVE-2019-3465 — (CVSS 8.8)