Skip to content
OpenAdvisories

Package · Ubuntu

phpseclib

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-84308

    phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

    phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add() and subtract(). During the Montgomery l…

    phpseclib phpseclib php-phpseclib3 phpseclib/phpseclib Debian Ubuntu Packagist
  • Medium 5.8
    CVE-2026-55599

    phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access

    phpseclib is a PHP secure communications library. From 0.1.1 until 1.0.30, 2.0.55, and 3.0.54, when an application validates an untrusted X.509 certificate with phpseclib, X509::validateSignature() reads a URL out of that certificate's Authority Information A…

    phpseclib phpseclib php-phpseclib3 phpseclib/phpseclib Debian Ubuntu Packagist