Threats tagged 'ghsa-94g3-g5v7-q4jg'

phpseclib versions prior to 3.0.50, 2.0.52, and 1.0.27 that use AES in CBC mode are vulnerable to a padding oracle timing attack. This vulnerability allows attackers to exploit timing differences during unpadding to potentially decrypt data. The issue is addressed by patches that fix the unpadding implementation. Users are advised to upgrade to the fixed versions or use alternative AES modes such as CTR, CFB, or OFB to mitigate the risk.