Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Crypt::DSA — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Crypt::DSA, with AI-generated Chinese analysis, references, and POCs.

Vendor: TIMLEGGE

CVE IDTitleCVSSSeverityPublished
CVE-2026-14570 Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery CWE-330--2026-07-05
CVE-2026-12205 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery CWE-323--2026-06-15
CVE-2026-8704 Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified CWE-552--2026-05-15
CVE-2026-8700 Crypt::DSA versions before 1.20 for Perl generate seeds using rand CWE-331--2026-05-15

All 4 known CVE vulnerabilities affecting Crypt::DSA with full Chinese analysis, references, and POCs where available.