Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-9638

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts

Description

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ARODLAND Crypt::PBKDF2

Default version status: unaffected

  • 0 to < 0.261630affected

References