CVE-2023-27560: Phpseclib

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.

Affected products

• Phpseclib Phpseclib: from 3.0.0, before 3.0.19 (fixed in 3.0.19)

Published 2023-03-03. Last modified 2026-06-17.