Advisories · Technology

TIMLEGGE Crypt::DSA.

Every CVE that names TIMLEGGE Crypt::DSA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-14570 CVE record

CVSS 7.5 High

Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery
- TIMLEGGE Crypt::DSA
- Weak cryptography or TLS
Not analysed yet 5 Jul 2026
CVE-2026-12205 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery
- TIMLEGGE Crypt::DSA
- CWE-323
Not analysed yet 15 Jun 2026
CVE-2026-8704 CVE record

CVSS 6.5 Medium

Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified
- TIMLEGGE Crypt::DSA
- Information disclosure
Not analysed yet 15 May 2026
CVE-2026-8700 CVE record

CVSS 7.3 High

Crypt::DSA versions before 1.20 for Perl generate seeds using rand
- TIMLEGGE Crypt::DSA
- CWE-331
Not analysed yet 15 May 2026