{"action":"Upgrade perl-cryptx to 0.079-r0 or later.","affected":[{"fixed":"0.079-r0","introduced":"0"}],"component":"perl-cryptx","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.19","exploited":false,"fixed_versions":["0.079-r0"],"id":"tcs_01M5NBGM7SC7CF5YN54X142VR2","modified_at":"2026-09-21T06:17:52.498616241Z","published_at":"2019-10-09T01:15:10.130Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2019-17362","https://security.alpinelinux.org/vuln/CVE-2019-17362"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2019-17362","url":"https://osv.dev/vulnerability/ALPINE-CVE-2019-17362"}],"summary":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to ca"}