Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2025-1860

Data::Entropy for Perl uses insecure rand() function for cryptographic functions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CPANSec

Description

Data::Entropy for Perl 0.007 and earlier use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZEFRAM Data::Entropy

Default version status: unaffected

  • 0 to < 0.008affected

References