p
phpseclib
Security Risk Profile
27
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 6, 2021 to present
9
Total CVEs
7
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
27/100
low
Severity Distribution
Critical
0High
7Medium
1Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
SSRF
1
Most Affected Products
1. composer/phpseclib/phpseclib25
2. phpseclib phpseclib22
3. debian/php-phpseclib4
4. debian/php-phpseclib34
5. debian/phpseclib4
Recent Vulnerabilities
See more →CVE-2026-55599
CVSS 5.8medium
phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access
Jun 22, 2026🔧 No Patch
CVE-2026-40194
CVSS 3.7low
phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals()
Apr 10, 2026
CVE-2026-32935
CVSS 8.2EPSS 0%high
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack
Mar 19, 2026
CVE-2023-52892
CVSS 7.5EPSS 0%high
Jun 27, 2024
CVE-2024-27354
CVSS 7.5EPSS 0%high
Mar 1, 2024
CVE-2024-27355
CVSS 7.5EPSS 0%high
Mar 1, 2024
CVE-2023-49316
CVSS 7.5high
Nov 27, 2023
CVE-2023-27560
CVSS 7.5high
Mar 3, 2023
CVE-2021-30130
CVSS 7.5high
Apr 6, 2021
Monitor phpseclib in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.