GitHub Advisoryadvisory · Packagist

GHSA-94g3-g5v7-q4jg phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack

HIGH Published 2026-03-19 Modified 2026-05-08 Official page ↗
Aliases
CVE-2026-32935
Ecosystem
Packagist
Packages
phpseclib/phpseclib
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-208
Reviewed
2026-03-19

Affected packages

• Packagist phpseclib/phpseclib: >= 3.0.0, < 3.0.50 → fixed in 3.0.50 • Packagist phpseclib/phpseclib: >= 2.0.0, < 2.0.52 → fixed in 2.0.52 • Packagist phpseclib/phpseclib: >= 0.1.1, < 1.0.27 → fixed in 1.0.27

Description

Impact Those using AES in CBC mode may be susceptible to a padding oracle timing attack. Patches https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788 Workarounds Use AES in CTR, CFB or OFB modes References https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788

Related

Alias · CVE (1)

  • CVE-2026-32935 phpseclib is a PHP secure communications library. vulnerability

Weakness · CWE (1)

  • CWE-208 Observable Timing Discrepancy weakness

References