Crypt::NaCl::Sodium vulnerabilities

2 known vulnerabilities in Crypt::NaCl::Sodium from Timlegge. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Crypt::NaCl::Sodium: Integer Overflow or Wraparound

  CVE-2026-30909Mar 8, 2026Timlegge

  Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows. bin2hex, encrypt, aes256gcm_encrypt_afternm and seal functions do not check that output size will be less than SIZE_MAX, which could lead to integer wraparound causing an unde

• 9.1 Critical severity

  Crypt::NaCl::Sodium: Integer Overflow or Wraparound

  CVE-2026-2588Feb 23, 2026Timlegge

  Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN (size_t) to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems size_t is typically 32-bits whil