VYPR

Crypt::Age

by Perl Foundation

CVEs (1)

  • CVE-2026-85783Oct 20, 2026
    risk 0.00cvss —epss —

    Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key. The header parser accepts any number of recipient stanzas, and unwrap_file_key tries every identity…