MIK

Products

ProductCVEsExploitedLatest
CryptX5–Jun 29, 2026
Crypt::ScryptKDF1–May 26, 2026

Exploited and recent CVEs

  • CVE-2026-13758 Low 3.7 CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path 0.4%
  • CVE-2026-41565 High 7.5 CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers 0.5%
  • CVE-2026-8647 Medium 4.8 Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available 0.2%
  • CVE-2026-41564 High 7.5 CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking 0.4%
  • CVE-2025-40912 Critical 9.8 CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode 0.4%
  • CVE-2025-40914 Critical 9.8 Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow 0.5%