Catalyst::Authentication::Credential::HTTP vulnerabilities

1 known vulnerability in Catalyst::Authentication::Credential::HTTP from Ether. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Catalyst::Authentication::Credential::HTTP: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2025-40920Aug 11, 2025Ether

  Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library. * Data::UUID does not use a strong cryptographic source for generating UUIDs. * Data::UUID returns v3 UUIDs, which are generated f