Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/phpseclib/phpseclib@3.0.36
purl pkg:composer/phpseclib/phpseclib@3.0.36
Next non-vulnerable version 3.0.50
Latest non-vulnerable version 3.0.51
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ku5e-5j7s-qyc9
Aliases:
CVE-2026-32935
GHSA-94g3-g5v7-q4jg
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack ### Impact Those using AES in CBC mode may be susceptible to a padding oracle timing attack. ### Patches https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788 ### Workarounds Use AES in CTR, CFB or OFB modes
3.0.50
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-6xjw-f9xu-fkg8 phpseclib a large prime can cause a denial of service An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a denial of service (CPU consumption for an isPrime primality check). NOTE: this issue was introduced when attempting to fix CVE-2023-27560. CVE-2024-27354
GHSA-hg35-mp25-qf6h
VCID-ars3-xpyv-jbf1 phpseclib does not properly limit the ASN1 OID length An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service (CPU consumption for decodeOID). CVE-2024-27355
GHSA-jr22-8qgm-4q87

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-22T07:35:14.778496+00:00 GitLab Importer Affected by VCID-ku5e-5j7s-qyc9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2026-32935.yml 38.4.0
2026-04-16T22:53:14.793514+00:00 GitLab Importer Fixing VCID-6xjw-f9xu-fkg8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 38.4.0
2026-04-16T22:53:14.307118+00:00 GitLab Importer Fixing VCID-ars3-xpyv-jbf1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 38.4.0
2026-04-16T03:00:42.470788+00:00 GHSA Importer Fixing VCID-6xjw-f9xu-fkg8 https://github.com/advisories/GHSA-hg35-mp25-qf6h 38.4.0
2026-04-16T03:00:42.259639+00:00 GHSA Importer Fixing VCID-ars3-xpyv-jbf1 https://github.com/advisories/GHSA-jr22-8qgm-4q87 38.4.0
2026-04-12T00:11:36.780759+00:00 GitLab Importer Fixing VCID-6xjw-f9xu-fkg8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 38.3.0
2026-04-12T00:11:36.249356+00:00 GitLab Importer Fixing VCID-ars3-xpyv-jbf1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 38.3.0
2026-04-11T14:29:16.038528+00:00 GHSA Importer Fixing VCID-6xjw-f9xu-fkg8 https://github.com/advisories/GHSA-hg35-mp25-qf6h 38.3.0
2026-04-11T14:29:15.813521+00:00 GHSA Importer Fixing VCID-ars3-xpyv-jbf1 https://github.com/advisories/GHSA-jr22-8qgm-4q87 38.3.0
2026-04-03T00:17:58.248181+00:00 GitLab Importer Fixing VCID-6xjw-f9xu-fkg8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 38.1.0
2026-04-03T00:17:57.777310+00:00 GitLab Importer Fixing VCID-ars3-xpyv-jbf1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 38.1.0
2026-04-02T15:10:15.089828+00:00 GHSA Importer Fixing VCID-6xjw-f9xu-fkg8 https://github.com/advisories/GHSA-hg35-mp25-qf6h 38.1.0
2026-04-02T15:10:14.863189+00:00 GHSA Importer Fixing VCID-ars3-xpyv-jbf1 https://github.com/advisories/GHSA-jr22-8qgm-4q87 38.1.0
2026-04-01T16:04:45.093968+00:00 GHSA Importer Fixing VCID-6xjw-f9xu-fkg8 https://github.com/advisories/GHSA-hg35-mp25-qf6h 38.0.0
2026-04-01T16:04:45.061015+00:00 GHSA Importer Fixing VCID-ars3-xpyv-jbf1 https://github.com/advisories/GHSA-jr22-8qgm-4q87 38.0.0
2026-04-01T12:52:36.175885+00:00 GitLab Importer Fixing VCID-6xjw-f9xu-fkg8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 38.0.0
2026-04-01T12:52:36.141961+00:00 GitLab Importer Fixing VCID-ars3-xpyv-jbf1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 38.0.0
2026-04-01T12:50:52.456560+00:00 GithubOSV Importer Fixing VCID-6xjw-f9xu-fkg8 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/03/GHSA-hg35-mp25-qf6h/GHSA-hg35-mp25-qf6h.json 38.0.0
2026-04-01T12:50:50.007589+00:00 GithubOSV Importer Fixing VCID-ars3-xpyv-jbf1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/03/GHSA-jr22-8qgm-4q87/GHSA-jr22-8qgm-4q87.json 38.0.0