Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 21, 2026 · NIST NVD

   Detected

   Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437.

2. Oct 7, 2026 · NIST NVD

   Updated

   Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437.

Affected

• cpe atrodo/net\

Sources

• CVE.orgVulnerability recordCVE-2025-15638

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2025-15638

  Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-201

  nvd.nist.gov

References

• Release Notes · metacpan.org
• Third Party Advisory · cve.org
• Third Party Advisory · cve.org