| Package | Affected versions | Patched versions |
|---|---|---|
| phpseclib/phpseclib | ≥ 0.1.1, < 1.0.23≥ 2.0.0, < 2.0.47≥ 3.0.0, < 3.0.36 | 1.0.232.0.473.0.36 |
| phpseclib | ≥ 1.0.0, < 1.0.23≥ 2.0.0, < 2.0.47≥ 3.0.0, < 3.0.36 | 1.0.232.0.473.0.36 |
Any application using that loads untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc).
https://github.com/phpseclib/phpseclib/commit/e32531001b4d62c66c3d824ccef54ffad835eb59
No.
https://github.com/phpseclib/phpseclib/commit/e32531001b4d62c66c3d824ccef54ffad835eb59 https://www.usenix.org/system/files/conference/usenixsecurity25/sec25cycle1-prepub-599-shi-bing.pdf
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free