Vulnerabilities

TI-2026-41071 CVE-2026-57082 · GHSA-3x8p-9jc8-598w

Net::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private…

LOW 26

Net::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00234 Published 2026-06-30 Fixed in 2.1.0 CWE-330

TI-2026-41070 CVE-2026-57081 · GHSA-39fp-mc5w-p8hh

LOW 39

Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2026-06-30 No fix listed CWE-400

TI-2026-41069 CVE-2026-57080 · GHSA-h9mr-rh28-v9r2

LOW 39

Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length prefix.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2026-06-30 No fix listed CWE-400

TI-2026-41068 CVE-2026-57079 · GHSA-5gfq-2rx4-6vwv

LOW 30

Net::BitTorrent versions before 2.1.0 for Perl write files outside the download directory via path traversal in peer-supplied metadata.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00403 Published 2026-06-30 Fixed in 2.1.0 CWE-22