[HIGH] phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack

PKSA-km2b-zc3b-mjm3 CVE-2026-32935 GHSA-94g3-g5v7-q4jg

Affected version: <=1.0.26|>=2.0.0,<=2.0.51|>=3.0.0,<=3.0.49

Reported by:
GitHub

[HIGH] phpseclib a large prime can cause a denial of service

PKSA-t5xz-td8w-f35v CVE-2024-27354 GHSA-hg35-mp25-qf6h

Affected version: >=3.0.0,<3.0.36|>=2.0.0,<2.0.47|>=1.0.0,<1.0.23

Reported by:
GitHub, FriendsOfPHP/security-advisories

[HIGH] phpseclib does not properly limit the ASN1 OID length

PKSA-jsh4-f6tg-bwyq CVE-2024-27355 GHSA-jr22-8qgm-4q87

Affected version: >=3.0.0,<3.0.36|>=2.0.0,<2.0.47|>=1.0.0,<1.0.23

Reported by:
GitHub, FriendsOfPHP/security-advisories