Threats tagged 'ghsa-rvhp-9hpj-rh7c'

Crypt::Age versions before 0.004 for Perl contain a vulnerability that allows an attacker to cause CPU exhaustion by submitting a file with an unbounded number of recipient stanzas. Each stanza triggers expensive cryptographic operations during decryption, leading to denial of service.