VYPR

libcryptx-perl

by Debian

CVEs (1)

  • CVE-2026-13758Jun 30, 2026
    risk 0.00cvss epss

    CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path. The decrypt_done($tag) form compares it against the computed tag with memNE (memcmp() != 0), which short-circuits on the first differing byte, so…