Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

CryptX

cpan

Cryptographic toolkit

View on metacpan.org

Security Advisories for CryptX in cpan

21 days ago

CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers. The gcm_decrypt_verify, ccm_decrypt_verify, chacha20poly1305_decrypt_verify and eax_decrypt_verify XS routines copied the caller-supplied authe... CPANSA-CryptX-2026-41565

cpan CryptX
about 2 months ago

CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking. The Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 and Crypt::PK::X25519 modules seed a per-object PRNG state in their const... CPANSA-CryptX-2026-41564

cpan CryptX
about 1 year ago

CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode. CryptX embeds the tomcrypt library. The versions of that library in CryptX before 0.065 may be susceptible to CVE-2019-17362. CPANSA-CryptX-2025-40912

cpan CryptX
about 1 year ago

Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328. CPANSA-CryptX-2025-40914

cpan CryptX
over 7 years ago

A user can pass anything as the tag into gcm_decrypt_verify() and it will return decrypted plaintext. CPANSA-CryptX-2018-01

cpan CryptX

Filter by Severity