phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-30130.json"