Read the docs
TI-2026-10497 Aliases CVE-2026-12205GHSA-88g7-87jg-w4q9

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to…

Priority MEDIUM 47CWE-323Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical "r". Keys used to sign more than once with an affected version should be considered compromised.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00289 21st percentileScored 2026-11-07
Fix Fixed Crypt::DSA (TIMLEGGE): 1.21

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TIMLEGGECrypt::DSAbefore 1.211.21Patch availableCNA
  • Crypt::DSA VendorTIMLEGGE Affected before 1.21 Fixed in 1.21 Patch available CNA

Remediation

  • Fix · CNA Crypt::DSA (TIMLEGGE) Fixed in 1.21

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-12205
  2. 2026-10-03 Alias added: GHSA-88g7-87jg-w4q9

References

Other 2

  • TI-2026-23735 Integer overflow in TIMLEGGE Crypt::NaCl::Sodium CVSS 3.1CRITICAL 9.8
  • TI-2020-18981 IO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library CVSS 3.1CRITICAL 9.8
  • TI-2026-14905 Improper signature verification in TIMLEGGE Net::SAML2 CVSS 3.1CRITICAL 9.8
  • TI-2026-08239 XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup CVSS 3.1CRITICAL 9.1
  • TI-2026-08334 Improper signature verification in TIMLEGGE XML::Sig CVSS 3.1CRITICAL 9.1
  • TI-2026-02211 Integer overflow in TIMLEGGE Crypt::NaCl::Sodium CVSS 3.1CRITICAL 9.1
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences