[CRITICAL] SAML PHP Toolkit Vulnerability on xmlseclibs CVE-2025-66475

PKSA-67d7-mg8j-87zx GHSA-5j8p-438x-rgg5

Affected version: >=4.0.0,<4.3.1|>=3.0.0,<3.8.1|<2.21.1

Reported by:
GitHub

[LOW] An error during signature verification can be treated as a successful verification.

PKSA-nh5k-9wsp-k4zd GHSA-9wrw-p9rm-r782

Affected version: <2.10.4

Reported by:
GitHub, FriendsOfPHP/security-advisories