StackRadarChart IndexLive demo

CVE-2026-84308

Medium

Advisory

Published 8 Sept 2026In the index since 30 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.3; base score, highest
EPSS: 0.003; 23rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 61; of 17,957 indexed, latest versions
Container images: 56; deployed by those charts
Fix available: 1 of 1; affected package

phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

Carried by container images the latest versions of 61 of 17,957 indexed charts deploy, on 56 images.

Affected package	Affected versions	Fixed in	Images
phpseclib/phpseclibcomposer	2.0.4, 2.0.15, 2.0.27, 2.0.29+26 more	3.0.57	56

OSV records: GHSA-q97c-8qh3-fpc6

Charts affected

61 by stars

Chart

Latest

Affected images

Radar Score

firefly-iiiphntom

1 of 2 See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-84308.

Container image	Digest	Package	Fixed in
phntom/fireflyiii :version-5.7.5	f881ea5fbbf1	phpseclib/phpseclib@3.0.14	3.0.57

Open the chart page →

2,054

libretimepodzone-charts

1 of 9 See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2026-84308.

Container image	Digest	Package	Fixed in
ghcr.io/libretime/libretime-legacy :latest	35b4531189c2	phpseclib/phpseclib@3.0.42	3.0.57

Open the chart page →

11,774

nextcloudquench-nextcloud

1 of 2 See more

nextcloud quench-nextcloud 0.0.17

1 of the 2 container images this version deploys carry CVE-2026-84308.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/nextclouddigest-pinned	222684978116	phpseclib/phpseclib@2.0.55	3.0.57

Open the chart page →

162

nextcloudsb-helm-charts

1 of 2 See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-84308.

Container image	Digest	Package	Fixed in
library/nextcloud :31.0.10-apache	b7faa1653c39	phpseclib/phpseclib@2.0.48	3.0.57

Open the chart page →

10,476

bookstackschmitzis

1 of 1 See more

bookstack schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84308.

Container image	Digest	Package	Fixed in
solidnerd/bookstack :21.12	762ffd5c51d3	phpseclib/phpseclib@3.0.12	3.0.57

Open the chart page →

3,043

snipeitschmitzis

1 of 2 See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-84308.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v8.3.1	141ebf2386fe	phpseclib/phpseclib@3.0.46	3.0.57

Open the chart page →

69,379

wallabagsebtiz13-charts

1 of 1 See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-84308.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	phpseclib/phpseclib@3.0.46	3.0.57

Open the chart page →

1,159

phpmyadminsitepilot

1 of 1 See more

phpmyadmin sitepilot 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-84308.

Container image	Digest	Package	Fixed in
phpmyadmin/phpmyadmin :5.1	38437e021deb	phpseclib/phpseclib@2.0.37	3.0.57

Open the chart page →

2,263

nextcloudth-charts

1 of 1 See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-84308.

Container image	Digest	Package	Fixed in
library/nextcloud :31.0.6-apache	588609d76b21	phpseclib/phpseclib@2.0.48	3.0.57

Open the chart page →

10,896

owncloudth-charts

1 of 1 See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-84308.

Container image	Digest	Package	Fixed in
owncloud/server :10.15.0	51d9b74fc2a8	phpseclib/phpseclib@3.0.39	3.0.57

Open the chart page →

10,605

apiwbstack

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-84308.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	phpseclib/phpseclib@3.0.14	3.0.57

Open the chart page →

2,479

Container images carrying it

56 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/linuxserver/bookstack :version-v21.12	f05447347ff1	phpseclib/phpseclib@3.0.12	3.0.57	1
ghcr.io/linuxserver/projectsend :version-r1295	40b883bef0cf	phpseclib/phpseclib@2.0.29	3.0.57	1
ghcr.io/linuxserver/snipe-it :version-v5.1.8	ac091e4c33bd	phpseclib/phpseclib@2.0.32	3.0.57	1
ghcr.io/monicahq/monica-next :main	8be69156acbb	phpseclib/phpseclib@3.0.46	3.0.57	1
ghcr.io/quenchworks/images/nextcloud	222684978116	phpseclib/phpseclib@2.0.55	3.0.57	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	phpseclib/phpseclib@3.0.14	3.0.57	1