BLUEFEET vulnerabilities
We track 1 vulnerability in BLUEFEET products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 20, 2025.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest BLUEFEET vulnerabilities
- 9.1 Critical severity
Starch: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Starch versions 0.14 and earlier generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with a counter, the epoch time, the built-in rand function, the PID, and internal Perl reference addresses. The PID will come from a