simplesamlphp/xml-security vulnerabilities (Packagist)

2 vulnerabilities.

• simplesamlphp/xml-security Packagist xml-security is Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption CVE-2026-32600 Fix available 8.2 HighMarch 13, 2026
• simplesamlphp/xml-security Packagist Validation of SignedInfo CVE-2023-49087 Fix available 6.8 MediumNovember 28, 2023