Crypt::SelfCertificate (Product): news timeline & CVEs

Re: CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL

CPAN removed Crypt::SelfCertificate 1.01–1.05 after CVE-2026-95831 identified a Python dropper.

CVE-2026-95831 covers Crypt::SelfCertificate versions 1.01 through 1.05 on CPAN, which contain malware that executes Python code retrieved from an obfuscated URL. Robert Rothenberg said every affected version has been removed, although copies may remain on independent mirrors, and that no reverse dependencies are known. Version 1.00 did not include the dropper but did not work properly and may have served as staging for an upgrade. CPANSec is still investigating.

oss-securityupdated Sep 24, 23:00 UTC · 2d agofirst Sep 23, 15:05 UTC · 3d agoMalware in the wild 4 sources CVE-2026-95831

Re: CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL

CVE-2026-95831: malicious Crypt::SelfCertificate 1.01–1.05 runs Python from an obfuscated URL.

OSS-Security discussion of CVE-2026-95831 says Crypt::SelfCertificate versions 1.01 through 1.05 on CPAN contain malware. The malicious releases execute Python code retrieved from an obfuscated URL. MetaCPAN requirement and changelog pages were not loading, which a poster attributed to the distribution being yanked. The follow-up asked whether the module ever had a legitimate release.

oss-securityupdated Sep 24, 23:00 UTC · 2d agofirst Sep 23, 01:56 UTC · 4d agoMalware 4 sources CVE-2026-95831

CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL

Crypt::SelfCertificate 1.01–1.05 for Perl contains malware that runs Python from an obfuscated URL.

Robert Rothenberg reported on oss-security that Perl module Crypt::SelfCertificate versions 1.01 through 1.05 contain malware, tracked as CVE-2026-95831. The malicious code executes Python retrieved from an obfuscated URL. The affected distribution is listed on MetaCPAN. The post does not describe a separate exploitation campaign beyond the trojanized package.

oss-securityupdated Sep 24, 23:00 UTC · 2d agofirst Sep 22, 18:34 UTC · 4d agoMalware 4 sources CVE-2026-95831

Crypt::SelfCertificate

Timeline3 articles

Related CVEsby mentions

Appears with

Re: CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL

Re: CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL

CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL