CVE-2026-2588

The Crypt::NaCl::Sodium library for Perl, versions through 2.001 , is vulnerable to an integer overflow flaw on 32-bit systems. The root cause resides in the Sodium.xs component, which incorrectly casts a STRLEN (size_t) to an unsigned long long when passing a length pointer to libsodium function...

CVE-2026-30909

Crypt::NaCl::Sodium for Perl up to version 2.002 is affected by potential integer overflows in bin2hex, encrypt, aes256gcm_encrypt_afternm, and seal, due to output-size checks against SIZE_MAX not being performed. This can lead to integer wraparound and an undersized output buffer, with impact de...