Packagist/onelogin/php-saml: critical
SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475
Action: Upgrade onelogin/php-saml to 2.21.1 or later.
composer require onelogin/php-saml:2.21.1composer require onelogin/php-saml:3.8.1composer require onelogin/php-saml:4.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.21.1 | - |
| 3.0.0 | 3.8.1 | - |
| 4.0.0 | 4.3.1 | - |
Fixed versions
| 2.21.1 | 3.8.1 | 4.3.1 |
Sources
- osv: GHSA-5j8p-438x-rgg5
- https://github.com/SAML-Toolkits/php-saml/security/advisories/GHSA-5j8p-438x-rgg5
- https://github.com/robrichards/xmlseclibs/security/advisories/GHSA-c4cc-x928-vjw9
- https://github.com/SAML-Toolkits/php-saml
- https://github.com/SAML-Toolkits/php-saml/releases/tag/2.21.1
- https://github.com/SAML-Toolkits/php-saml/releases/tag/3.8.1
- https://github.com/SAML-Toolkits/php-saml/releases/tag/4.3.1
published · modified · JSON