Chorny vulnerabilities
We track 2 vulnerabilities in Chorny products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 6, 2026.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest Chorny vulnerabilities
- 8.2 High severity
Apache::Session::Generate::ModUniqueId: Generation of Predictable Numbers or Identifiers
Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId (added in version 1.54) uses the value of the UNIQUE_ID environment variable for the session id. The UNIQUE_ID vari
- 9.1 Critical severity
Apache::Session::Generate::MD5: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id. Apache::Session::Generate::MD5 generates session ids insecurely. The default session id generator returns a MD5 hash seeded with the built-in rand() function, the epoch t