TIMLEGGE Crypt::DSA

• CVE-2026-14570 High 7.5 Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery 0.5%
• CVE-2026-12205 Critical 9.1 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery 0.3%
• CVE-2026-8704 Medium 6.5 Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified 0.3%
• CVE-2026-8700 High 7.3 Crypt::DSA versions before 1.20 for Perl generate seeds using rand 0.4%