VYPR

Crypt\

by Timlegge

CVEs (3)

  • CVE-2026-30909CriMar 8, 2026
    risk 0.00cvss 9.8epss 0.01

    Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows. bin2hex, encrypt, aes256gcm_encrypt_afternm and seal functions do not check that output size will be less than SIZE_MAX, which could lead to integer wraparound causing an undersized output…

  • CVE-2026-2588CriFeb 23, 2026
    risk 0.00cvss 9.1epss 0.00

    Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN (size_t) to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems size_t is typically 32-bits while an unsigned…

  • CVE-2025-1828HigMar 11, 2025
    risk 0.00cvss 8.8epss 0.00

    Crypt::Random Perl package 1.05 through 1.55 may use rand() function, which is not cryptographically strong, for cryptographic functions. If the Provider is not specified and /dev/urandom or an Entropy Gathering Daemon (egd) service is not available Crypt::Random will…