Cryptographic Seed Vulnerability in Crypt::DSA by TIMLEGGE
CVE-2026-8700
Currently unrated
What is CVE-2026-8700?
The Crypt::DSA library for Perl, versions prior to 1.20, contains a significant security flaw in the way it generates cryptographic seeds. Utilizing Perl's built-in 'rand' function, the library produces predictable seeds, which undermines the cryptographic strength and can be exploited by malicious actors. This vulnerability compromises the integrity of cryptographic operations, making it imperative for users to upgrade to version 1.20 or later to mitigate risks associated with weak seed generation.
Affected Version(s)
Crypt::DSA 0 < 1.20
