https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 18:17:50 +0000 https://vulnerability.circl.lu/vuln/cve-2026-32935 <p><strong>Affected:</strong> phpseclib</p> <p>phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.</p> <p><strong>Affected:</strong> phpseclib</p> <p>phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.</p> https://vulnerability.circl.lu/vuln/cve-2026-32935 https://vulnerability.circl.lu/vuln/usn-8769-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: phpseclib, Ubuntu:Pro:18.04:LTS: phpseclib, Ubuntu:Pro:20.04:LTS: phpseclib, Ubuntu:22.04:LTS: phpseclib, Ubuntu:Pro:24.04:LTS: phpseclib, Ubuntu:Pro:26.04:LTS: phpseclib</p> <p>It was discovered that phpseclib did not perform padding validation in constant time when using AES in CBC mode. A remote attacker could possibly use this issue to conduct a padding oracle timing attack and obtain sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: phpseclib, Ubuntu:Pro:18.04:LTS: phpseclib, Ubuntu:Pro:20.04:LTS: phpseclib, Ubuntu:22.04:LTS: phpseclib, Ubuntu:Pro:24.04:LTS: phpseclib, Ubuntu:Pro:26.04:LTS: phpseclib</p> <p>It was discovered that phpseclib did not perform padding validation in constant time when using AES in CBC mode. A remote attacker could possibly use this issue to conduct a padding oracle timing attack and obtain sensitive information.</p> https://vulnerability.circl.lu/vuln/usn-8769-1