BIAFRA vulnerabilities
We track 2 vulnerabilities in BIAFRA products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 4, 2026.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest BIAFRA vulnerabilities
- 8.1 High severity
Dancer2::Plugin::Auth::OAuth::Provider: Cross-Site Request Forgery
Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The authentication_url method builds the provider authorization redirect without issuing a state value, and the callback method exchanges the cal
- 9.1 Critical severity
Dancer2::Plugin::Auth::OAuth: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The default nonce was generated using an MD5 hash of the epoch time, which is predictable.