CVE-2026-32313
1 advisory.
Packagist/robrichards/xmlseclibs CVE-2026-32313: high 8.2, EPSS 0.17%
xmlseclibs: Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption
Action: Upgrade robrichards/xmlseclibs to 3.1.5 or later.
composer require robrichards/xmlseclibs:3.1.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.5 | - |
Fixed versions
| 3.1.5 |
Sources
- osv: GHSA-4v26-v6cg-g6f9
- https://github.com/robrichards/xmlseclibs/security/advisories/GHSA-4v26-v6cg-g6f9
- https://nvd.nist.gov/vuln/detail/CVE-2026-32313
- https://github.com/robrichards/xmlseclibs/commit/03062be78178cbb5e8f605cd255dc32a14981f92
- https://github.com/robrichards/xmlseclibs
- https://github.com/robrichards/xmlseclibs/releases/tag/3.1.5
CVE-2026-32313 · published · modified · JSON