[CRITICAL] SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475

PKSA-67d7-mg8j-87zx GHSA-5j8p-438x-rgg5

Affected version: >=4.0.0,<4.3.1|>=3.0.0,<3.8.1|<2.21.1

Reported by:
GitHub

[LOW] An error during signature verification can be treated as a successful verification.

PKSA-nh5k-9wsp-k4zd GHSA-9wrw-p9rm-r782

Affected version: <2.10.4

Reported by:
GitHub, FriendsOfPHP/security-advisories

[MEDIUM] Vulnerability to Response Wrapping attacks resulting in a malicious user gaining unauthorized access to a system.

PKSA-4x6t-byc2-3fqx CVE-2016-1000253 GHSA-g48f-pgwh-wwxx

Affected version: <2.10.0

Reported by:
GitHub, FriendsOfPHP/security-advisories