Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/phpseclib/phpseclib@3.0.34
purl pkg:composer/phpseclib/phpseclib@3.0.34
Next non-vulnerable version 3.0.50
Latest non-vulnerable version 3.0.51
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-6xjw-f9xu-fkg8
Aliases:
CVE-2024-27354
GHSA-hg35-mp25-qf6h
phpseclib a large prime can cause a denial of service An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a denial of service (CPU consumption for an isPrime primality check). NOTE: this issue was introduced when attempting to fix CVE-2023-27560.
3.0.36
Affected by 1 other vulnerability.
VCID-ars3-xpyv-jbf1
Aliases:
CVE-2024-27355
GHSA-jr22-8qgm-4q87
phpseclib does not properly limit the ASN1 OID length An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service (CPU consumption for decodeOID).
3.0.36
Affected by 1 other vulnerability.
VCID-ku5e-5j7s-qyc9
Aliases:
CVE-2026-32935
GHSA-94g3-g5v7-q4jg
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack ### Impact Those using AES in CBC mode may be susceptible to a padding oracle timing attack. ### Patches https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788 ### Workarounds Use AES in CTR, CFB or OFB modes
3.0.50
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-zxph-sjym-kqhg phpseclib vulnerable to denial of service In Math/BinaryField.php in phpseclib before 3.0.34, excessively large degrees can lead to a denial of service. CVE-2023-49316
GHSA-jpr7-q523-hx25

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-22T07:35:14.770780+00:00 GitLab Importer Affected by VCID-ku5e-5j7s-qyc9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2026-32935.yml 38.4.0
2026-04-16T22:53:14.786379+00:00 GitLab Importer Affected by VCID-6xjw-f9xu-fkg8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 38.4.0
2026-04-16T22:53:14.299846+00:00 GitLab Importer Affected by VCID-ars3-xpyv-jbf1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 38.4.0
2026-04-16T03:00:42.464123+00:00 GHSA Importer Affected by VCID-6xjw-f9xu-fkg8 https://github.com/advisories/GHSA-hg35-mp25-qf6h 38.4.0
2026-04-16T03:00:42.251879+00:00 GHSA Importer Affected by VCID-ars3-xpyv-jbf1 https://github.com/advisories/GHSA-jr22-8qgm-4q87 38.4.0
2026-04-12T00:11:36.773500+00:00 GitLab Importer Affected by VCID-6xjw-f9xu-fkg8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 38.3.0
2026-04-12T00:11:36.242021+00:00 GitLab Importer Affected by VCID-ars3-xpyv-jbf1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 38.3.0
2026-04-11T14:29:16.030675+00:00 GHSA Importer Affected by VCID-6xjw-f9xu-fkg8 https://github.com/advisories/GHSA-hg35-mp25-qf6h 38.3.0
2026-04-11T14:29:15.805545+00:00 GHSA Importer Affected by VCID-ars3-xpyv-jbf1 https://github.com/advisories/GHSA-jr22-8qgm-4q87 38.3.0
2026-04-03T00:17:58.241191+00:00 GitLab Importer Affected by VCID-6xjw-f9xu-fkg8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 38.1.0
2026-04-03T00:17:57.770733+00:00 GitLab Importer Affected by VCID-ars3-xpyv-jbf1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 38.1.0
2026-04-02T17:00:44.812958+00:00 GHSA Importer Fixing VCID-zxph-sjym-kqhg https://github.com/advisories/GHSA-jpr7-q523-hx25 38.1.0
2026-04-02T15:10:15.082756+00:00 GHSA Importer Affected by VCID-6xjw-f9xu-fkg8 https://github.com/advisories/GHSA-hg35-mp25-qf6h 38.1.0
2026-04-02T15:10:14.854956+00:00 GHSA Importer Affected by VCID-ars3-xpyv-jbf1 https://github.com/advisories/GHSA-jr22-8qgm-4q87 38.1.0
2026-04-01T12:58:48.046525+00:00 GithubOSV Importer Fixing VCID-zxph-sjym-kqhg https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/11/GHSA-jpr7-q523-hx25/GHSA-jpr7-q523-hx25.json 38.0.0
2026-04-01T12:52:09.573283+00:00 GitLab Importer Fixing VCID-zxph-sjym-kqhg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2023-49316.yml 38.0.0