A vulnerability, which was classified as critical, has been found in TIMLEGGE Crypt::NaCl::Sodium up to 2.002 on Perl. This issue affects the function bin2hex/aes256gcm_encrypt_afternm/seal of the component Message Handler. Performing a manipulation results in integer overflow.

This vulnerability is cataloged as CVE-2026-30909. It is possible to initiate the attack remotely. There is no exploit available.

Applying a patch is the recommended action to fix this issue.