CVE-2024-27354

The phpseclib library (versions 1.x before 1.0.23 , 2.x before 2.0.47 , and 3.x before 3.0.36 ) is vulnerable to a denial of service attack. The root cause is that an attacker can provide a malformed certificate containing an extremely large prime , which leads to excessive CPU consumption during...