Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
MIK records in CISA KEVNo MIK vulnerabilities are listed in CISA KEV.
Priority HIGH 76
CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00427 · Published 2025-06-11 · Fixed in 0.065 CWE-1395
Priority MEDIUM 50
Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00562 · Published 2025-06-11 · No fix listed CWE-1395
Priority LOW 39
CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00469 · Published 2026-05-28 · Fixed in 0.088_001 CWE-121
Priority LOW 21
Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available.
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00222 · Published 2026-05-26 · No fix listed CWE-338
Priority LOW 18
CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00399 · Published 2026-06-29 · Fixed in 0.088_001 CWE-208
Open these records in search →