AIKIDO-2026-21741
robrichards/xmlseclibs is vulnerable to XPath Injection
75
High Risk
This Affects:
robrichards/xmlseclibsTL;DR
During reference validation, XMLSecurityDSig evaluates REC-xpath-19991116 Transform expressions taken from the document before any signature cryptography runs. A crafted XPath expression is evaluated by libxml2 and can consume excessive CPU, giving a pre-authentication denial of service, and because the expression is arbitrary by design it cannot be sanitized. Signing is unaffected. The fix rejects XPath transforms during verification by default and caps transform and namespace counts when they are explicitly enabled.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you verify XML signatures on documents from untrusted sources.
Background info
robrichards/xmlseclibs is vulnerable to XPath Injection in versions 1.3.2 - 3.1.5.
How to fix this
Upgrade the robrichards/xmlseclibs library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.