StackRadar

CVE-2023-27560

High

Advisory

Published 3 Mar 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
13
of 17,781 indexed, latest versions
Container images
12
deployed by those charts
Fix available
1 of 1
affected package

phpseclib Infinite Loop vulnerability

Carried by container images the latest versions of 13 of 17,781 indexed charts deploy, on 12 images.

Affected packageAffected versionsFixed inImages
phpseclib/phpseclibcomposer3.0.6, 3.0.12, 3.0.13, 3.0.14+1 more3.0.1912
OSV records
GHSA-hm7p-r324-hhf3

Charts affected

13 by stars
ChartLatestAffected imagesRadar Score
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
phpseclib/phpseclib@3.0.14
3.0.19

Open the chart page →

18,509
firefly-iiigeek-cookbookVerified publisher0.3.01 of 1See more

firefly-iii geek-cookbook 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
fireflyiii/core:version-5.6.142f4283bd0cf7
phpseclib/phpseclib@3.0.13
3.0.19

Open the chart page →

2,076
monicageek-cookbookVerified publisher8.2.01 of 1See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
library/monica:3.7.0-apacheceb1ba4196ab
phpseclib/phpseclib@3.0.13
3.0.19

Open the chart page →

2,096
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
phpseclib/phpseclib@3.0.12
3.0.19

Open the chart page →

8,967
openldapcsic-charts0.1.11 of 2See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:8.0.1d46cf25d1dda
phpseclib/phpseclib@3.0.12
3.0.19

Open the chart page →

5,293
passboltg0dscookie0.5.21 of 2See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
phpseclib/phpseclib@3.0.18
3.0.19

Open the chart page →

7,940
anonaddygeek-cookbookVerified publisher6.0.01 of 1See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
anonaddy/anonaddy:0.12.3957a95565166
phpseclib/phpseclib@3.0.14
3.0.19

Open the chart page →

4,788
bookstackgeek-cookbookVerified publisher5.2.01 of 1See more

bookstack geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v21.12f05447347ff1
phpseclib/phpseclib@3.0.12
3.0.19

Open the chart page →

1,269
wallabaggeek-cookbookVerified publisher7.2.01 of 1See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
wallabag/wallabag:2.4.25e4c26a7fb4a
phpseclib/phpseclib@3.0.6
3.0.19

Open the chart page →

4,358
openldapopenldap0.1.11 of 2See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:8.0.1d46cf25d1dda
phpseclib/phpseclib@3.0.12
3.0.19

Open the chart page →

5,293
firefly-iiiphntom0.2.101 of 2See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
phntom/fireflyiii:version-5.7.5f881ea5fbbf1
phpseclib/phpseclib@3.0.14
3.0.19

Open the chart page →

1,813
bookstackschmitzis0.1.11 of 1See more

bookstack schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
solidnerd/bookstack:21.12762ffd5c51d3
phpseclib/phpseclib@3.0.12
3.0.19

Open the chart page →

2,751
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2023-27560.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
phpseclib/phpseclib@3.0.14
3.0.19

Open the chart page →

2,019

Container images carrying it

12 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ldapaccountmanager/lam:8.0.1d46cf25d1dda
phpseclib/phpseclib@3.0.12
3.0.19
2
anonaddy/anonaddy:0.12.3957a95565166
phpseclib/phpseclib@3.0.14
3.0.19
1
fireflyiii/core:version-5.6.142f4283bd0cf7
phpseclib/phpseclib@3.0.13
3.0.19
1
library/monica:3.7.0-apacheceb1ba4196ab
phpseclib/phpseclib@3.0.13
3.0.19
1
librenms/librenms:22.4.14f1f3d667cc7
phpseclib/phpseclib@3.0.12
3.0.19
1
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
phpseclib/phpseclib@3.0.18
3.0.19
1
phntom/fireflyiii:version-5.7.5f881ea5fbbf1
phpseclib/phpseclib@3.0.14
3.0.19
1
snipe/snipe-it:v6.0.1455fb7636a98c
phpseclib/phpseclib@3.0.14
3.0.19
1
solidnerd/bookstack:21.12762ffd5c51d3
phpseclib/phpseclib@3.0.12
3.0.19
1
wallabag/wallabag:2.4.25e4c26a7fb4a
phpseclib/phpseclib@3.0.6
3.0.19
1
ghcr.io/linuxserver/bookstack:version-v21.12f05447347ff1
phpseclib/phpseclib@3.0.12
3.0.19
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
phpseclib/phpseclib@3.0.14
3.0.19
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.