Search for packages
| purl | pkg:deb/debian/php-phpseclib@2.0.47-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-6xjw-f9xu-fkg8 | phpseclib a large prime can cause a denial of service An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a denial of service (CPU consumption for an isPrime primality check). NOTE: this issue was introduced when attempting to fix CVE-2023-27560. |
CVE-2024-27354
GHSA-hg35-mp25-qf6h |
| VCID-ars3-xpyv-jbf1 | phpseclib does not properly limit the ASN1 OID length An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service (CPU consumption for decodeOID). |
CVE-2024-27355
GHSA-jr22-8qgm-4q87 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T11:43:50.810355+00:00 | Debian Importer | Fixing | VCID-ars3-xpyv-jbf1 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T10:27:03.667691+00:00 | Debian Importer | Fixing | VCID-6xjw-f9xu-fkg8 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-12T18:15:27.077520+00:00 | Debian Importer | Fixing | VCID-ars3-xpyv-jbf1 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-12T18:15:27.022798+00:00 | Debian Importer | Fixing | VCID-6xjw-f9xu-fkg8 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:49:40.609208+00:00 | Debian Importer | Fixing | VCID-ars3-xpyv-jbf1 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:49:40.567625+00:00 | Debian Importer | Fixing | VCID-6xjw-f9xu-fkg8 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |