CVE-2026-8700 — Crypt::DSA versions before 1.20 for Perl generate seeds using rand

CVE-2026-8700

Crypt::DSA versions before 1.20 for Perl generate seeds using rand PUBLISHED

Description (CNA)

Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.

Affected (CNA)

Vendor / product	Versions
TIMLEGGE / Crypt::DSA	affected 0 before 1.20

CWE

CWE-331

References

https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.20/changes
https://metacpan.org/release/TIMLEGGE/Crypt-DSA-1.20/diff/TIMLEGGE/Crypt-DSA-1.19#lib/Crypt/DSA/KeyChain.pm

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/05/15/26

CISA-ADP

No English description supplied.

No references supplied.