Simplesamlphp Xml-security — known CVE vulnerabilities

Every CVE whose affected-product data names Simplesamlphp Xml-security, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-32600 — CVSS 8.2 (high): xml-security is a library that implements XML signatures and encryption. Prior to versions 2.3.1 and 1.13.9, XML nodes encrypted with…
• CVE-2023-49087 — CVSS 6.8 (medium): xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verification that the hash…