VYPR

Net::Dropbear

by Perl Foundation

CVEs (2)

  • CVE-2025-15638CriApr 21, 2026
    risk 0.65cvss 10.0epss 0.01

    Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and…

  • CVE-2025-40913MedJul 16, 2025
    risk 0.35cvss 6.5epss 0.00

    Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::Dropbear embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.