Crypt::PBKDF2 vulnerabilities

1 known vulnerability in Crypt::PBKDF2 from ARODLAND. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Crypt::PBKDF2: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2026-9638Jun 12, 2026ARODLAND

  Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.