Apache::Session::Generate::ModUniqueId vulnerabilities

1 known vulnerability in Apache::Session::Generate::ModUniqueId from Chorny. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Apache::Session::Generate::ModUniqueId: Generation of Predictable Numbers or Identifiers

  CVE-2026-5081May 6, 2026Chorny

  Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId (added in version 1.54) uses the value of the UNIQUE_ID environment variable for the session id. The UNIQUE_ID vari