CR
Product
Crypt::DSA
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add Crypt::DSA to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12205 | 9.1 | Jun 15 | Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery Affected: before 1.21 |
| CVE-2026-14570 | 7.5 | Jul 5 | Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery Affected: before 1.22 |
| CVE-2026-8700 | 7.3 | May 15 | Crypt::DSA versions before 1.20 for Perl generate seeds using rand Affected: before 1.20 |
| CVE-2026-8704 | 6.5 | May 15 | Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified Affected: through 1.19 |
Showing 4