Crypt::DSA
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-8700 | Hig | 0.47 | 7.3 | 0.00 | May 15, 2026 | Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage. | ||
| CVE-2026-14570 | Hig | 0.42 | 7.5 | 0.00 | Jul 5, 2026 | Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search.… | ||
| CVE-2026-8704 | Med | 0.42 | 6.5 | 0.00 | May 15, 2026 | Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified. |
- risk 0.47cvss 7.3epss 0.00
Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
- risk 0.42cvss 7.5epss 0.00
Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery. "Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search.…
- risk 0.42cvss 6.5epss 0.00
Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.