https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T11:10:36.660636+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2023-52892 fkie_cve-2023-52892 2026-09-30T11:10:37.377020+00:00

In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates are incorrectly allowed to have a special meaning in regular expressions (such as a + wildcard), leading to name confusion in X.509 certificate host verification.

 https://vulnerability.circl.lu/vuln/ghsa-ff7q-6vwh-v9m4 GHSA-ff7q-6vwh-v9m4 — Name confusion in x509 Subject Alternative Name fields 2026-09-30T11:10:37.377243+00:00

Affected: Packagist: phpseclib/phpseclib

In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates are incorrectly allowed to have a special meaning in regular expressions (such as a + wildcard), leading to name confusion in X.509 certificate host verification.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2023-52892 UBUNTU-CVE-2023-52892 2026-09-30T11:10:37.377312+00:00

Affected: Ubuntu:Pro:16.04:LTS: php-phpseclib, Ubuntu:Pro:16.04:LTS: phpseclib, Ubuntu:Pro:18.04:LTS: php-phpseclib, Ubuntu:Pro:18.04:LTS: phpseclib, Ubuntu:Pro:20.04:LTS: php-phpseclib, Ubuntu:Pro:20.04:LTS: phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib3, Ubuntu:Pro:22.04:LTS: phpseclib

In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields in TLS certificates are incorrectly allowed to have a special meaning in regular expressions (such as a + wildcard), leading to name confusion in X.509 certificate host verification.