PUBLISHED
2026-02-13 00:16
MODIFIED
2026-02-13 00:16
EPSS (Prob. Exploit)
0.29%
Top 79.5%
> DESCRIPTION
WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) - The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
WWW::OAuth 1.000 and earlier for Perl uses insecure rand() function for cryptographic functions
AFFECTED PACKAGES:
Unknown / Unknown
7 versions affected
> HISTORIQUE DES MODIFICATIONS
Première apparition
13/02/2026 00:16
Source: NVD
📊
ENRICHISSEMENT
01/03/2026 06:46
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) - The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptogra...
Total des modifications: 1
Dernière mise à jour: 8 months ago