CVE-2021-30130
1 advisory.
Packagist/phpseclib/phpseclib CVE-2021-30130: high 7.5, EPSS 1.05%
Improper Certificate Validation in phpseclib
Action: Upgrade phpseclib/phpseclib to 2.0.31 or later.
composer require phpseclib/phpseclib:3.0.7composer require phpseclib/phpseclib:2.0.31Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.0.7 | - |
| 0 | 2.0.31 | - |
Fixed versions
| 3.0.7 | 2.0.31 |
Sources
- osv: GHSA-vf4w-fg7r-5v94
- https://nvd.nist.gov/vuln/detail/CVE-2021-30130
- https://github.com/phpseclib/phpseclib/pull/1635
- https://github.com/FriendsOfPHP/security-advisories/blob/master/phpseclib/phpseclib/CVE-2021-30130.yaml
- https://github.com/phpseclib/phpseclib/releases/tag/2.0.31
- https://github.com/phpseclib/phpseclib/releases/tag/3.0.7
- https://lists.debian.org/debian-lts-announce/2022/11/msg00024.html
- https://lists.debian.org/debian-lts-announce/2022/11/msg00025.html
CVE-2021-30130 · published · modified · JSON