Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/phpseclib@1.0.23-6%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/phpseclib@1.0.23-6%2Bdeb13u1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-ku5e-5j7s-qyc9 phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack ### Impact Those using AES in CBC mode may be susceptible to a padding oracle timing attack. ### Patches https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788 ### Workarounds Use AES in CTR, CFB or OFB modes CVE-2026-32935
GHSA-94g3-g5v7-q4jg

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:13:57.867906+00:00 Debian Importer Fixing VCID-ku5e-5j7s-qyc9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:38:16.592282+00:00 Debian Importer Fixing VCID-ku5e-5j7s-qyc9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:49:56.898318+00:00 Debian Importer Fixing VCID-ku5e-5j7s-qyc9 https://security-tracker.debian.org/tracker/data/json 38.1.0