CVE-2026-14570

Name of the Vulnerable Software and Affected Versions Crypt::DSA versions prior to 1.22

Description The software draws the DSA signing nonce and private key from a biased random generator. Specifically, the makerandom() function in Crypt::DSA::Util forces the high bit of every returned value to ensure an N-bit integer for prime search. This results in non-uniform values because the top bit is fixed. An attacker can recover the private key using a lattice attack by collecting a modest number of signatures and the public key.

Recommendations Update to version 1.22 or later. Generate new keys, as any keys used to sign with affected versions should be considered compromised.