Phpseclib needs guardrails on large binaryfield integers

概要

参考情報

• phpseclib/phpseclib security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2023-49316 · ADVISORY
• phpseclib/phpseclib commit 964d781 · WEB
• FriendsOfPHP/security-advisories · WEB
• phpseclib/phpseclib · PACKAGE
• phpseclib/phpseclib release 3.0.34 · WEB

phpseclib/phpseclib のその他の脆弱性

• CVE-2026-84308中 6.3phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeFi…
• CVE-2026-55599中 5.8phpseclib is a PHP secure communications library. From 0.1.1 until 1.0.30, 2.0.55, and 3.0.54, when an application validates an untrusted X.…
• CVE-2026-44167高 7.5phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certifi…
• CVE-2026-40194低 3.7phpseclib is a PHP secure communications library. Starting in 0.1.1 and prior to 3.0.51, 2.0.53, and 1.0.28, phpseclib\Net\SSH2::get_binary_…
• CVE-2026-32935中 5.9phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.…