SANKO Net::BitTorrent

• CVE-2026-57082 Medium 5.9 Net::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG 0.2%
• CVE-2026-57081 High 7.5 Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input 0.5%
• CVE-2026-57080 High 7.5 Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length prefix 0.5%
• CVE-2026-57079 Medium 5.3 Net::BitTorrent versions before 2.1.0 for Perl write files outside the download directory via path traversal in peer-supplied metadata 0.4%