Security Advisories (3)
CVE-2020-36254 (2021-02-25)

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.

CVE-2025-15638 (2026-04-21)

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437.

CVE-2025-40913 (2025-07-16)

Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::DropbearĀ embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.

Changes for version 0.12 - 2020-03-19

  • Disable the new -fPIE addition to Dropbear's configure to enable build on amd64 again

Modules

Use Dropbear SSH inside of perl
Embed and control a Dropbear SSH client inside of perl (Not implemented yet)
Embed and control a Dropbear SSH server inside of perl
XS interface to Dropbear
Manage the authentication information of a user's login attempt.
Manage how a command session should be handled by Dropbear.