https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:03:59.302670+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-10216 EUVD-2026-10216 2026-10-04T18:03:59.391726+00:00 EUVD-2026-10216 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49316 fkie_cve-2023-49316 2026-10-04T18:03:59.391764+00:00

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-2f25-pfq3-c7h8 GHSA-2f25-pfq3-c7h8 — Phpseclib needs guardrails on large binaryfield integers 2026-10-04T18:03:59.391796+00:00

Affected: Packagist: phpseclib/phpseclib

### Impact Anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc)

### Patches https://github.com/phpseclib/phpseclib/commit/964d78101a70305df33f442f5490f0adb3b7e77f

### Workarounds No.

### References https://github.com/phpseclib/phpseclib/commit/964d78101a70305df33f442f5490f0adb3b7e77f https://www.usenix.org/system/files/usenixsecurity25-shi-bing.pdf

 https://cve.radiocsirt.org/vuln/gsd-2023-49316 gsd-2023-49316 2026-10-04T18:03:59.391826+00:00 gsd-2023-49316 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-49316 UBUNTU-CVE-2023-49316 2026-10-04T18:03:59.391839+00:00

Affected: Ubuntu:Pro:22.04:LTS: php-phpseclib3, Ubuntu:24.04:LTS: php-phpseclib3

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.