PHP's openssl_private_decrypt function using PKCS1 padding is vulnerable to the Marvin Attack unless used with OpenSSL versions that include the rsa_pkcs1_implicit_rejection fix. This fix is part of OpenSSL 3.2 and backported to stable Linux distributions and recent PHP Windows builds. PHP Windows builds version 8.1.29, 8.2.20, and 8.3.8 and above include the patched OpenSSL versions that mitigate this vulnerability.