THREATIST.IORead the docs 5 records
CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path.
CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers.
Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available.
CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode.
Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow.