Executive brief
robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation
Affected products
- Packagist robrichards/xmlseclibs
Junglewise Threat Intelligence
CVE-2025-66578 · Severity: low · CVSS 3.1 · Published 2025-12-08
Technologies: robrichards/xmlseclibs (Packagist). Vendors: Packagist.
robrichards/xmlseclibs has an Libxml2 Canonicalization error which can bypass Digest/Signature validation