Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

phpseclib CVE-2021-30130 #550

Merged
merged 2 commits into from Apr 13, 2021
Merged

phpseclib CVE-2021-30130 #550

merged 2 commits into from Apr 13, 2021

Commits on Apr 13, 2021

  1. Create CVE-2021-30130.yaml 

    phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification.

References

https://nvd.nist.gov/vuln/detail/CVE-2021-30130
phpseclib/phpseclib#1635
https://github.com/phpseclib/phpseclib/releases/tag/2.0.31
https://github.com/phpseclib/phpseclib/releases/tag/3.0.7
    @sumityadav
    sumityadav committed Apr 13, 2021
    Copy the full SHA
    ae07e18 View commit details
    Browse the repository at this point in the history

  2. Update CVE-2021-30130.yaml

    @sumityadav
    sumityadav committed Apr 13, 2021
    Copy the full SHA
    d3ab171 View commit details
    Browse the repository at this point in the history