CVE-2025-15638

Description

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437.

PUBLISHED Reserved 2026-04-20 | Published 2026-04-21 | Updated 2026-04-21 | Assigner CPANSec

Problem types

CWE-1395 Dependency on Vulnerable Third-Party Component

Product status

References

www.cve.org/CVERecord?id=CVE-2016-6129 vendor-advisory

www.cve.org/CVERecord?id=CVE-2018-12437 vendor-advisory

metacpan.org/...ear-0.14/source/dropbear/libtomcrypt/changes release-notes

cve.org (CVE-2025-15638)

nvd.nist.gov (CVE-2025-15638)

Download JSON