Threats tagged 'ghsa-2528-jw5q-ww88'

CVE-2024-27354 is a high-severity vulnerability in phpseclib affecting the isPrime and randomPrime functions used for prime number generation and primality testing. The flaw impacts versions >=0.1.1 <1.0.23, >=2.0.0 <2.0.47, and >=3.0.0 <3.0.36. A patch is available in versions 1.0.23, 2.0.47, and 3.0.36. The vulnerability does not affect confidentiality or integrity but can cause denial of service (availability impact). Using the GMP extension may mitigate the issue if proper guardrails are in place.