BVA vulnerabilities
We track 1 vulnerability in BVA products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 16, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest BVA vulnerabilities
- 9.8 Critical severity
Concierge::Sessions: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids. The generate_session_id function in Concierge::Sessions::Base defaults to using the uuidgen command to generate a UUID, with a fallback to using Perl's built-in rand f