HIGHCVE-2026-8700Published Modified CNA CPANSec
CVE-2026-8700: Crypt::DSA versions before 1.20 for Perl generate seeds using rand
Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
Metrics
- CVSS v3.1
- 7.3
- Severity
- HIGH
- Fixed in
- 1.20
- Affected Products
- 1
Fix available
1.20
Affected packages
- TIMLEGGE / Crypt::DSA< 1.20 (from 0)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LReferences