Junglewise Threat Intelligence

CVE-2025-66578: robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation

CVE-2025-66578 · Severity: low · CVSS 3.1 · Published 2025-12-08

Technologies: robrichards/xmlseclibs (Packagist). Vendors: Packagist.

Executive brief

robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation

Affected products

  • Packagist robrichards/xmlseclibs

Related threats