robrichards/xmlseclibs XPath injection

Impact

A vulnerability has been identified in the robrichards/xmlseclibs library, specifically related to XPath injection. The issue arises from inadequate filtering of user input before it is incorporated into XPath expressions.

Affected packages

Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.

Original source description

References

• Patch github.com/robrichards/xmlseclibs/commit/649032643f7aac493e91ca318da0339aec72aa4a
• Security advisory github.com/FriendsOfPHP/security-advisories/blob/master/robrichards/xmlseclibs/2018-09-27.yaml
• Source reference github.com/robrichards/xmlseclibs