Known vulnerabilities in XMLSecLibs

Vendor: Rob Richards
Software: XMLSecLibs
Software CPE: cpe:2.3:a:robrichards:xmlseclibs:*:*:*:*:*:*:*:*
Website: https://www.cdatazone.org/
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting XMLSecLibs XMLSecLibs is affected by 10 known vulnerabilities: 2 high, 7 medium, 1 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145067 - Improper Verification of Cryptographic Signature
 CWE-347 Low
No
No
 4.0.0 25.08.2026 SB2026082528
#VU145065 - Observable discrepancy
 CWE-203 Medium
No
No
 4.0.0 25.08.2026 SB2026082528
#VU145063 - Improper Restriction of XML External Entity Reference ('XXE')
 CWE-611 Medium
No
No
 4.0.0 25.08.2026 SB2026082528
#VU145062 - Insufficient Verification of Data Authenticity
 CWE-345 Medium
No
No
 4.0.0 25.08.2026 SB2026082528
#VU145061 - Information Exposure Through Timing Discrepancy
 CWE-208 Medium
No
No
 4.0.0 25.08.2026 SB2026082528
#VU145060 - Observable discrepancy
 CWE-203 Medium
No
No
 4.0.0 25.08.2026 SB2026082528
#VU145059 - Improper Neutralization of Data within XPath Expressions
 CWE-643 Medium
No
No
 4.0.0 25.08.2026 SB2026082528
#VU127523 - Improper Validation of Integrity Check Value
CVE-2026-32313		 CWE-354 High
No
No
 3.1.5 24.04.2026 SB20260424111
#VU121036 - Dependency on Vulnerable Third-Party Component
CVE-2025-66475		 CWE-1395 High
No
No
 3.1.4 07.01.2026 SB2026010752
SB20260424105
#VU22596 - Reachable Assertion
CVE-2019-3465		 CWE-617 Medium
No
No
 2.1.1, 3.0.4 07.11.2019 SB2019110713
SB2019110714
SB2019123106
and 15 more