Medium
CVE-2026-84308
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filters
Medium
CVE-2026-55599
phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access
High
CVE-2023-49316
Phpseclib needs guardrails on large binaryfield integers
High
CVE-2024-27355
phpseclib guardrails needed on OID length
High
CVE-2024-27354
phpseclib: guardrails needed on isPrime and randomPrime
High
CVE-2026-44167
phpseclib has a CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()
Low
CVE-2026-40194
phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals()
High
CVE-2026-32935
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack
High
CVE-2023-52892
Name confusion in x509 Subject Alternative Name fields
High
CVE-2023-27560
phpseclib Infinite Loop vulnerability
High
CVE-2021-30130
Improper Certificate Validation in phpseclib
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.