Phpseclib vulnerabilities

Products

• Phpseclib 11

Newest

• phpseclib phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery CVE-2026-84308 Fix available 6.3 MediumSeptember 1, 2026
• phpseclib phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access CVE-2026-55599 Fix available 5.8 MediumJune 16, 2026
• phpseclib phpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID() CVE-2026-44167 Fix available 7.5 HighMay 5, 2026
• phpseclib phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals() CVE-2026-40194 Fix available 3.7 LowApril 10, 2026
• phpseclib phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack CVE-2026-32935 Fix available 8.2 HighMarch 19, 2026
• phpseclib Name confusion in x509 Subject Alternative Name fields CVE-2023-52892 Fix available 7.5 HighJune 27, 2024
• phpseclib, debian linux +1 more phpseclib guardrails needed on OID length CVE-2024-27355 Fix available 7.5 HighMarch 1, 2024
• phpseclib, debian linux, phpseclib 1x +2 more +4 more phpseclib: guardrails needed on isPrime and randomPrime CVE-2024-27354 Fix available 7.5 HighMarch 1, 2024
• phpseclib Phpseclib needs guardrails on large binaryfield integers CVE-2023-49316 Fix available 7.5 HighNovember 27, 2023
• phpseclib phpseclib Infinite Loop vulnerability CVE-2023-27560 Fix available 7.5 HighMarch 3, 2023
• phpseclib, debian linux +1 more Improper Certificate Validation in phpseclib CVE-2021-30130 Fix available 7.5 HighApril 6, 2021