pkg:Packagist/phpseclib/phpseclib

All known vulnerabilities

• HIGH7.5CVE-2023-49316Duplicate Advisory: phpseclib vulnerable to denial of service
  >= 3.0.0, < 3.0.34
• HIGH7.5CVE-2023-49316Duplicate Advisory: phpseclib vulnerable to denial of service
  >= 3.0.0, < 3.0.34
• HIGH7.5CVE-2024-27355Duplicate Advisory: phpseclib does not properly limit the ASN1 OID length
  >= 2.0.0, < 2.0.47
• HIGH7.5CVE-2024-27355Duplicate Advisory: phpseclib does not properly limit the ASN1 OID length
  >= 3.0.0, < 3.0.36
• HIGH7.5CVE-2024-27354phpseclib: guardrails needed on isPrime and randomPrime
  >= 0.1.1, < 1.0.23
• HIGH7.5CVE-2024-27354phpseclib: guardrails needed on isPrime and randomPrime
  >= 1.0.0, < 1.0.23
• HIGH7.5CVE-2026-44167phpseclib has a CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()
  >= 0.1.1, < 1.0.29
• HIGH7.5CVE-2023-52892phpseclib - security update
  from 0, < 1.0.22
• HIGH7.5CVE-2023-27560phpseclib Infinite Loop vulnerability
  >= 3.0.0, < 3.0.19
• HIGH7.5CVE-2021-30130php-phpseclib - security update
  >= 3.0.0, < 3.0.7
• MEDIUM5.9CVE-2026-32935phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack
  >= 3.0.0, < 3.0.50
• LOW3.7CVE-2026-40194phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals()
  >= 0.1.1, < 1.0.28