Vulnerability · Published Jun 15, 2026 · Assigned by CPANSec
CVE-2026-12205Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery
Critical 9.1
In plain English
A critical-severity security flaw in Crypt::DSA from TIMLEGGE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Official description
Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | libcrypt-dsa-perl | no fix listed | DEBIAN-CVE-2026-12205 |
| Debian:13 | libcrypt-dsa-perl | no fix listed | DEBIAN-CVE-2026-12205 |
| Ubuntu:22.04:LTS | libcrypt-dsa-perl | no fix listed | UBUNTU-CVE-2026-12205 |
| Ubuntu:24.04:LTS | libcrypt-dsa-perl | no fix listed | UBUNTU-CVE-2026-12205 |
| Ubuntu:25.10 | libcrypt-dsa-perl | no fix listed | UBUNTU-CVE-2026-12205 |
| Ubuntu:26.04:LTS | libcrypt-dsa-perl | no fix listed | UBUNTU-CVE-2026-12205 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TIMLEGGE | Crypt::DSA | 0 – before 1.21 |
Weakness: CWE-323 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N