[HIGH] Critical signature bypass

PKSA-9qfh-kpgp-dw7t CVE-2019-3465 GHSA-pqm6-cgwr-x6pf

Affected package: robrichards/xmlseclibs

Affected version: >=1.0.0,<2.0.0|>=2.0.0,<2.1.1|>=3.0.0,<3.0.4

Reported by:
GitHub, FriendsOfPHP/security-advisories