Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-40913
6.5
MEDIUMCVSS v3
Published
July 16, 2025
Affected
1 project
Assigned by
9b29abf9-4ab0-4765-b253-1875cd9b441e
Severity scale
010
Description
Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::Dropbear embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.
libtom/libtommath
GitHubLibTomMath is a free open source portable number theoretic multiple-precision integer library written entirely in C.
GitHubLibTomMath is a free open source portable number theoretic multiple-precision integer library written entirely in C.NVD