CVE-2025-15444

CVE-2025-15444 is linked to a libsodium issue (CVE-2025-69277) in which crypto_core_ed25519_is_valid_point mishandles checks for elliptic-curve points in atypical usages. The Perl Crypt::Sodium::XS module versions before 0.000042 bundle a vulnerable libsodium. Affected libsodium versions include ...

CVE-2026-30910

CVE-2026-30910 affects Crypt::Sodium::XS for Perl up to and including 0.001000. The issue stems from integer overflows in combined aead encryption, combined signature creation, and bin2hex, where output sizes may exceed SIZE_MAX, causing undersized buffers, crashes (bin2hex and non-aes256gcm cryp...