phpseclib/phpseclib vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-M557-WRGG-6RP4Mediumphpseclib/phpseclib: phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side…CVE-2023-49316Highphpseclib/phpseclib: Phpseclib needs guardrails on large binaryfield integers CVE-2024-27355Highphpseclib/phpseclib: phpseclib guardrails needed on OID length CVE-2024-27354Highphpseclib/phpseclib: phpseclib: guardrails needed on isPrime and randomPrime CVE-2026-44167Highphpseclib/phpseclib: phpseclib has a CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()CVE-2026-40194Lowphpseclib/phpseclib: phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of…CVE-2026-32935Highphpseclib/phpseclib: phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack CVE-2023-52892Highphpseclib/phpseclib: Name confusion in x509 Subject Alternative Name fields CVE-2023-27560Highphpseclib/phpseclib: phpseclib Infinite Loop vulnerability CVE-2021-30130Highphpseclib/phpseclib: Improper Certificate Validation in phpseclib

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo