CVE-2026-84308
MediumAdvisory
Published 8 Sept 2026In the index since 30 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.003
- 23rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 61
- of 17,957 indexed, latest versions
- Container images
- 56
- deployed by those charts
- Fix available
- 1 of 1
- affected package
phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
Carried by container images the latest versions of 61 of 17,957 indexed charts deploy, on 56 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| phpseclib/ | 2.0.4, 2.0.15, 2.0.27, 2.0.29+26 more | 3.0.57 | 56 |
- OSV records
- GHSA-q97c-8qh3-fpc6
Charts affected
61 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| firefly-iiiphntom | 0.2.10 | 1 of 2See more | 2,054 |
| libretimepodzone-chartsVerified publisher | 0.4.1 | 1 of 9See more | 11,774 |
| nextcloudquench-nextcloudVerified publisher | 0.0.17 | 1 of 2See more | 162 |
| nextcloudsb-helm-charts | 0.4.0 | 1 of 2See more | 10,476 |
| bookstackschmitzis | 0.1.1 | 1 of 1See more | 3,043 |
| snipeitschmitzis | 6.1.0 | 1 of 2See more | 69,379 |
| wallabagsebtiz13-chartsVerified publisher | 0.6.0 | 1 of 1See more | 1,159 |
| phpmyadminsitepilot | 1.0.1 | 1 of 1See more | 2,263 |
| nextcloudth-chartsVerified publisher | 0.4.0 | 1 of 1See more | 10,896 |
| owncloudth-chartsVerified publisher | 0.2.1 | 1 of 1See more | 10,605 |
| apiwbstack | 0.36.0 | 1 of 1See more | 2,479 |
Container images carrying it
56 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| wallabag/ | 4a527e027e0d | phpseclib/ | 3.0.57 | 3 |
| fireflyiii/ | fe4ecec4c2ba | phpseclib/ | 3.0.57 | 2 |
| ldapaccountmanager/ | d46cf25d1dda | phpseclib/ | 3.0.57 | 2 |
| passbolt/ | 655547e17263 | phpseclib/ | 3.0.57 | 2 |
| anonaddy/ | 957a95565166 | phpseclib/ | 3.0.57 | 1 |
| appwrite/ | 1aaa70127114 | phpseclib/ | 3.0.57 | 1 |
| castopod/ | 1fd37280cbb2 | phpseclib/ | 3.0.57 | 1 |
| castopod/ | 4e4f0440520f | phpseclib/ | 3.0.57 | 1 |
| cspconsole/ | 46dda4a31bd6 | phpseclib/ | 3.0.57 | 1 |
| digitalist/ | bc4aeeaea769 | phpseclib/ | 3.0.57 | 1 |
| dokuwiki/ | f08ecfdda239 | phpseclib/ | 3.0.57 | 1 |
| espocrm/ | 1b5a24504ed9 | phpseclib/ | 3.0.57 | 1 |
| espocrm/ | 4bd92daf5f0c | phpseclib/ | 3.0.57 | 1 |
| filegator/ | 34bf565a11a4 | phpseclib/ | 3.0.57 | 1 |
| fireflyiii/ | 2f4283bd0cf7 | phpseclib/ | 3.0.57 | 1 |
| fireflyiii/ | ae69fdd95cde | phpseclib/ | 3.0.57 | 1 |
| fireflyiii/ | c0300cfd3d76 | phpseclib/ | 3.0.57 | 1 |
| ibarreche/ | e16a469c5791 | phpseclib/ | 3.0.57 | 1 |
| invoiceninja/ | 1437916dee01 | phpseclib/ | 3.0.57 | 1 |
| leantime/ | ad4bfb0699d3 | phpseclib/ | 3.0.57 | 1 |
| library/ | 832e02b53466 | phpseclib/ | 3.0.57 | 1 |
| library/ | b2d4efc7c2b3 | phpseclib/ | 3.0.57 | 1 |
| library/ | ceb1ba4196ab | phpseclib/ | 3.0.57 | 1 |
| library/ | 276547e033df | phpseclib/ | 3.0.57 | 1 |
| library/ | 3e9f6eaa5dc8 | phpseclib/ | 3.0.57 | 1 |
| library/ | 55de721417c1 | phpseclib/ | 3.0.57 | 1 |
| library/ | 588609d76b21 | phpseclib/ | 3.0.57 | 1 |
| library/ | 96104cb965fc | phpseclib/ | 3.0.57 | 1 |
| library/ | a5ace30c695a | phpseclib/ | 3.0.57 | 1 |
| library/ | b7faa1653c39 | phpseclib/ | 3.0.57 | 1 |
| librenms/ | 0920bc9117a8 | phpseclib/ | 3.0.57 | 1 |
| librenms/ | 4f1f3d667cc7 | phpseclib/ | 3.0.57 | 1 |
| librenms/ | 814e3fb8d837 | phpseclib/ | 3.0.57 | 1 |
| linkstackorg/ | 1c8b05399ee4 | phpseclib/ | 3.0.57 | 1 |
| linuxserver/ | 2ebf97852661 | phpseclib/ | 3.0.57 | 1 |
| linuxserver/ | 25b2b2c18125 | phpseclib/ | 3.0.57 | 1 |
| mautic/ | 94ea4acf4049 | phpseclib/ | 3.0.57 | 1 |
| openemr/ | 89eaa6d9a4e3 | phpseclib/ | 3.0.57 | 1 |
| owncloud/ | 51d9b74fc2a8 | phpseclib/ | 3.0.57 | 1 |
| owncloud/ | 74c53d341076 | phpseclib/ | 3.0.57 | 1 |
| owncloud/ | b3f9efdcd7f7 | phpseclib/ | 3.0.57 | 1 |
| passbolt/ | ec046e112d5c | phpseclib/ | 3.0.57 | 1 |
| phntom/ | f881ea5fbbf1 | phpseclib/ | 3.0.57 | 1 |
| phpmyadmin/ | 38437e021deb | phpseclib/ | 3.0.57 | 1 |
| snipe/ | 141ebf2386fe | phpseclib/ | 3.0.57 | 1 |
| snipe/ | 55fb7636a98c | phpseclib/ | 3.0.57 | 1 |
| solidnerd/ | 762ffd5c51d3 | phpseclib/ | 3.0.57 | 1 |
| wallabag/ | 5e4c26a7fb4a | phpseclib/ | 3.0.57 | 1 |
| ghcr.io/ | 35b4531189c2 | phpseclib/ | 3.0.57 | 1 |
| ghcr.io/ | cc795b254b73 | phpseclib/ | 3.0.57 | 1 |