[MEDIUM] phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

PKSA-12sz-bcny-pk4m CVE-2026-84308 GHSA-q97c-8qh3-fpc6

Affected package: phpseclib/phpseclib

Affected version: >=4.0.0,<4.0.1|<3.0.57

Reported by:
GitHub