IAMB vulnerabilities

Products

• Crypt::Sodium::XS 2

Latest IAMB CVEs

Newest publication first

1. CVE-2026-30910 Crypt::Sodium::XS versions through 0.001000 for Perl has potential integer overflows

   Published 2026-03-08

   High·CVSS 7.5 EPSS 0.30%

   Crypt::Sodium::XS versions through 0.001000 for Perl has potential integer overflows. Combined aead encryption, combined signature creation, and bin2hex functions do not check that output size will be less than SIZE_MAX, which could lead to integer wraparound causing an undersize...

2. CVE-2025-15444 Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium

   Published 2026-01-06

   Critical·CVSS 9.8 EPSS 0.27%

   Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium libsodium <= 1.0.20 or a version of libsodium released before December 30, 2025 contains a vulnerability documented as CVE-2025-69277 https://www.cve.org/CVERecord?id=CVE-2025...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.