CVE-2026-13758Low 3.7CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path0.4%
CVE-2026-41565High 7.5CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers0.5%
CVE-2026-8647Medium 4.8Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available0.2%
CVE-2026-41564High 7.5CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking0.4%
CVE-2025-40912Critical 9.8CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode0.4%
CVE-2025-40914Critical 9.8Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow0.5%