CVE-2026-12205

Name of the Vulnerable Software and Affected Versions Crypt::DSA versions prior to 1.21

Description The software reuses the nonce across signatures, which can lead to the recovery of the private key. The sign() function in the Crypt::DSA::sign module caches the per-signature nonce material within the Key object and fails to clear it. Consequently, the first call to sign() on a Key object selects a nonce, and all subsequent calls to sign() on that same object reuse it, resulting in an identical "r" value. Any keys used to sign more than once using an affected version are considered compromised.

Recommendations Update to version 1.21 or later.