Simplesamlphp / Xml-Security

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-32600	xml-security is Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption	HIGH	8.2	Mar 13, 2026
CVE-2024-34580	Apache XML Security for C++ through 2.0.4 implements the XML Signature Syntax and Processing (XMLDsig) specification without protection against an SSRF payload…	MEDIUM	5.3	Jun 26, 2024
CVE-2023-49087	Validation of SignedInfo	HIGH	7.5	Nov 30, 2023

Rows per page

Showing 1 to 3 of 3 CVEs