Search for packages
Package details: pkg:composer/phpseclib/phpseclib@2.0.46
purl pkg:composer/phpseclib/phpseclib@2.0.46
Next non-vulnerable version 2.0.47
Latest non-vulnerable version 3.0.36
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-8knv-9pae-aaad
Aliases:
CVE-2024-27354
GHSA-hg35-mp25-qf6h
An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can construct a malformed certificate containing an extremely large prime to cause a denial of service (CPU consumption for an isPrime primality check). NOTE: this issue was introduced when attempting to fix CVE-2023-27560.
2.0.47
Affected by 0 other vulnerabilities.
3.0.36
Affected by 0 other vulnerabilities.
VCID-uwma-72dv-aaan
Aliases:
CVE-2024-27355
GHSA-jr22-8qgm-4q87
An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the ASN.1 object identifier of a certificate, a sub identifier may be provided that leads to a denial of service (CPU consumption for decodeOID).
2.0.47
Affected by 0 other vulnerabilities.
3.0.36
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-gq37-jebb-aaad In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates are incorrectly allowed to have a special meaning in regular expressions (such as a + wildcard), leading to name confusion in X.509 certificate host verification. CVE-2023-52892
GHSA-ff7q-6vwh-v9m4

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T17:04:24.697727+00:00 GitLab Importer Fixing VCID-gq37-jebb-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2023-52892.yml 36.1.3
2025-06-20T16:54:34.087611+00:00 GitLab Importer Affected by VCID-8knv-9pae-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 36.1.3
2025-06-20T16:54:33.765014+00:00 GitLab Importer Affected by VCID-uwma-72dv-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 36.1.3
2025-06-03T23:40:43.250474+00:00 GitLab Importer Fixing VCID-gq37-jebb-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2023-52892.yml 36.1.0
2025-06-03T23:31:35.435611+00:00 GitLab Importer Affected by VCID-8knv-9pae-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 36.1.0
2025-06-03T23:31:35.098256+00:00 GitLab Importer Affected by VCID-uwma-72dv-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 36.1.0
2025-06-02T23:39:00.302888+00:00 GitLab Importer Fixing VCID-gq37-jebb-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2023-52892.yml 36.1.2
2025-06-02T23:29:24.146854+00:00 GitLab Importer Affected by VCID-8knv-9pae-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 36.1.2
2025-06-02T23:29:23.803093+00:00 GitLab Importer Affected by VCID-uwma-72dv-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 36.1.2
2025-04-03T22:17:13.889896+00:00 GitLab Importer Fixing VCID-gq37-jebb-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2023-52892.yml 36.0.0
2025-04-03T21:58:48.446628+00:00 GitLab Importer Affected by VCID-8knv-9pae-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 36.0.0
2025-04-03T21:58:47.786640+00:00 GitLab Importer Affected by VCID-uwma-72dv-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 36.0.0
2025-02-18T03:50:29.531221+00:00 GitLab Importer Affected by VCID-uwma-72dv-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 35.1.0
2025-02-18T03:50:28.604703+00:00 GitLab Importer Affected by VCID-8knv-9pae-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 35.1.0
2025-02-18T03:42:43.794516+00:00 GitLab Importer Fixing VCID-gq37-jebb-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2023-52892.yml 35.1.0
2024-11-21T01:04:12.577062+00:00 GitLab Importer Affected by VCID-uwma-72dv-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 35.0.0
2024-11-21T01:04:11.879536+00:00 GitLab Importer Affected by VCID-8knv-9pae-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 35.0.0
2024-11-21T01:00:19.151468+00:00 GitLab Importer Fixing VCID-gq37-jebb-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2023-52892.yml 35.0.0
2024-11-19T00:53:16.323027+00:00 GitLab Importer Affected by VCID-uwma-72dv-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 34.3.2
2024-11-19T00:53:15.649302+00:00 GitLab Importer Affected by VCID-8knv-9pae-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 34.3.2
2024-11-19T00:48:55.336630+00:00 GitLab Importer Fixing VCID-gq37-jebb-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2023-52892.yml 34.3.2
2024-10-15T19:19:58.407924+00:00 GithubOSV Importer Fixing VCID-gq37-jebb-aaad https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/06/GHSA-ff7q-6vwh-v9m4/GHSA-ff7q-6vwh-v9m4.json 34.0.2
2024-10-08T01:24:09.547502+00:00 GitLab Importer Affected by VCID-uwma-72dv-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 34.0.2
2024-10-08T01:24:08.829390+00:00 GitLab Importer Affected by VCID-8knv-9pae-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 34.0.2
2024-10-08T01:20:43.992685+00:00 GitLab Importer Fixing VCID-gq37-jebb-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2023-52892.yml 34.0.2
2024-10-07T22:07:50.124365+00:00 GHSA Importer Affected by VCID-uwma-72dv-aaan https://github.com/advisories/GHSA-jr22-8qgm-4q87 34.0.2
2024-10-07T22:07:49.428192+00:00 GHSA Importer Affected by VCID-8knv-9pae-aaad https://github.com/advisories/GHSA-hg35-mp25-qf6h 34.0.2
2024-10-07T21:51:06.076496+00:00 GHSA Importer Fixing VCID-gq37-jebb-aaad https://github.com/advisories/GHSA-ff7q-6vwh-v9m4 34.0.2
2024-09-23T01:29:04.140236+00:00 GitLab Importer Affected by VCID-uwma-72dv-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27355.yml 34.0.1
2024-09-23T01:29:03.321684+00:00 GitLab Importer Affected by VCID-8knv-9pae-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2024-27354.yml 34.0.1
2024-09-22T22:35:04.021235+00:00 GHSA Importer Affected by VCID-uwma-72dv-aaan https://github.com/advisories/GHSA-jr22-8qgm-4q87 34.0.1
2024-09-22T22:35:03.208308+00:00 GHSA Importer Affected by VCID-8knv-9pae-aaad https://github.com/advisories/GHSA-hg35-mp25-qf6h 34.0.1
2024-09-18T09:19:24.331999+00:00 GithubOSV Importer Fixing VCID-gq37-jebb-aaad https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/06/GHSA-ff7q-6vwh-v9m4/GHSA-ff7q-6vwh-v9m4.json 34.0.1
2024-09-17T22:34:14.843466+00:00 GitLab Importer Fixing VCID-gq37-jebb-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpseclib/phpseclib/CVE-2023-52892.yml 34.0.1
2024-09-17T22:07:22.544198+00:00 GHSA Importer Fixing VCID-gq37-jebb-aaad https://github.com/advisories/GHSA-ff7q-6vwh-v9m4 34.0.1
2024-06-28T22:44:43.020803+00:00 GithubOSV Importer Fixing VCID-gq37-jebb-aaad https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/06/GHSA-ff7q-6vwh-v9m4/GHSA-ff7q-6vwh-v9m4.json 34.0.0rc4
2024-06-28T19:11:38.872479+00:00 GHSA Importer Fixing VCID-gq37-jebb-aaad https://github.com/advisories/GHSA-ff7q-6vwh-v9m4 34.0.0rc4
2024-05-17T21:17:41.052074+00:00 GHSA Importer Affected by VCID-uwma-72dv-aaan https://github.com/advisories/GHSA-jr22-8qgm-4q87 34.0.0rc4
2024-05-17T21:17:38.739357+00:00 GHSA Importer Affected by VCID-8knv-9pae-aaad https://github.com/advisories/GHSA-hg35-mp25-qf6h 34.0.0rc4