Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt.

Net::Dropbear versions before 0.14 includes versions of Dropbear 2019…

Net::Dropbear versions before 0.14 for Perl contain a vulnerable version of libtomcrypt. The affected versions include Dropbear 2019.78 or earlier with libtomcrypt v1.18.1 or earlier. This vulnerability is related to two existing CVEs: CVE-2016-6129 and CVE-2018-12437. Users should upgrade to Net::Dropbear version 0.14 or later to address this security issue. The vulnerability affects the cryptographic library used by the Dropbear SSH implementation in Perl.