Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-40905

WWW::OAuth 1.000 and earlier for Perl uses insecure rand() function for cryptographic functions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CPANSec

Description

WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

DBOOK WWW::OAuth

Default version status: unaffected

  • 0 to ≤ 1.000affected

References