| Package | Affected versions | Patched versions |
|---|---|---|
| phpseclib/phpseclib | ≥ 0.1.1, < 1.0.23≥ 2.0.0, < 2.0.47≥ 3.0.0, < 3.0.36 | 1.0.232.0.473.0.36 |
| phpseclib | ≥ 1.0.0, < 1.0.23≥ 2.0.0, < 2.0.47≥ 3.0.0, < 3.0.36 | 1.0.232.0.473.0.36 |
Anyone trying to generate a prime and testing the primality of a number.
https://github.com/phpseclib/phpseclib/commit/ad5dbdf2129f5e0fb644637770b7f33de8ca8575
Using the GMP extension would probably help, assuming that one has its own guardrails.
https://github.com/phpseclib/phpseclib/commit/ad5dbdf2129f5e0fb644637770b7f33de8ca8575 https://www.usenix.org/system/files/conference/usenixsecurity25/sec25cycle1-prepub-599-shi-bing.pdf
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free