Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Net-BitTorrent

cpan

Pure Perl BitTorrent Client

View on github.com · View on metacpan.org

Security Advisories for Net-BitTorrent in cpan

19 days ago

Net::BitTorrent versions through 2.0.1 for Perl write files outside the download directory via path traversal in peer-supplied metadata. Net::BitTorrent validates file path components only on the .torrent-file ingest path. The peer and magnet metadata... CPANSA-Net-BitTorrent-2026-57079

cpan Net-BitTorrent
19 days ago

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length prefix. The peer-wire framing in _process_messages trusts the 4-byte length prefix sent by a connected peer with no upper bound, wh... CPANSA-Net-BitTorrent-2026-57080

cpan Net-BitTorrent
19 days ago

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by valu... CPANSA-Net-BitTorrent-2026-57081

cpan Net-BitTorrent
19 days ago

Net::BitTorrent versions through 2.0.1 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG. The MSE (Message Stream Encryption) handshake derives its 160-bit Diffie-Hellman private key from Perl's rand(), a non-cryptogra... CPANSA-Net-BitTorrent-2026-57082

cpan Net-BitTorrent

Filter by Severity