Timlegge Crypt::dsa
4 CVEs affecting Timlegge Crypt::dsa. Latest disclosed: 2026-07-05. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-12205 | Critical | 9.1 | 2026-06-15 | Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce… |
CVE-2026-14570 | High | 7.5 | 2026-07-05 | Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::D… |
CVE-2026-8700 | High | 7.3 | 2026-05-15 | Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuita… |
CVE-2026-8704 | Medium | 6.5 | 2026-05-15 | Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified. |