phpseclib/phpseclib

Composer · Package

12 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recoveryCVE-2026-84308 · GHSA-Q97C-8QH3-FPC6	phpseclib/phpseclib	Composer	Medium	Fix reported	2026-09-30
phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information AccessCVE-2026-55599 · GHSA-M557-WRGG-6RP4	phpseclib/phpseclib	Composer	Medium	Fix reported	2026-09-10
phpseclib has a CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()CVE-2026-44167 · GHSA-3QPQ-R242-JQJ7	phpseclib/phpseclib	Composer	High	Fix reported	2026-09-10
phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals()CVE-2026-40194 · GHSA-R854-JRXH-36QX	phpseclib/phpseclib	Composer	Low	Fix reported	2026-09-10
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attackCVE-2026-32935 · GHSA-94G3-G5V7-Q4JG	phpseclib/phpseclib	Composer	High	Fix reported	2026-09-10
Improper Certificate Validation in phpseclibCVE-2021-30130 · GHSA-VF4W-FG7R-5V94Version ranges need review.	phpseclib/phpseclib	Composer	High	Fix reported	2026-09-10
Phpseclib needs guardrails on large binaryfield integersCVE-2023-49316 · GHSA-2F25-PFQ3-C7H8	phpseclib/phpseclib	Composer	High	Fix reported	2026-05-09
phpseclib guardrails needed on OID lengthCVE-2024-27355 · GHSA-F2QX-66WF-WVVXVersion ranges need review.	phpseclib/phpseclib	Composer	High	Fix reported	2026-05-08
phpseclib: guardrails needed on isPrime and randomPrimeCVE-2024-27354 · GHSA-2528-JW5Q-WW88Version ranges need review.	phpseclib/phpseclib	Composer	High	Fix reported	2026-05-06
phpseclib Infinite Loop vulnerabilityCVE-2023-27560 · GHSA-HM7P-R324-HHF3	phpseclib/phpseclib	Composer	High	Fix reported	2025-03-07
Name confusion in x509 Subject Alternative Name fieldsCVE-2023-52892 · GHSA-FF7Q-6VWH-V9M4	phpseclib/phpseclib	Composer	High	Fix reported	2024-08-06
phpseclib unbounded PBKDF iteration count in encrypted key/PFX/CMS parsing enables CPU-exhaustion DoSPKSA-H7CZ-Q7ZQ-MDKT	phpseclib/phpseclib	Composer	Unknown	No fix reported	Not recorded