TIMLEGGE

Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows.

A buffer overflow, as described in CVE-2020-8927, exists in the embedded Brotli library.

Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content carries no signature.

XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup.

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery.

XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID.

Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems.

XML-Sig versions 0.27 through 0.67 for Perl incorrectly validates XML files if signatures are omitted.

Crypt::Random Perl package 1.05 through 1.55 may use rand() function, which is not cryptographically strong, for cryptographic functions.

XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic check.

Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery.

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when no trust anchor is configured.

Crypt::DSA versions before 1.20 for Perl generate seeds using rand.

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with document-wide XPath instead of the signed subtree.

Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.