Apache::SessionX vulnerabilities

1 known vulnerability in Apache::SessionX from Grichter. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Apache::SessionX: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2025-40932Feb 27, 2026Grichter

  Apache::SessionX versions through 2.01 for Perl create insecure session id. Apache::SessionX generates session ids insecurely. The default session id generator in Apache::SessionX::Generate::MD5 returns a MD5 hash seeded with the built-in rand() function, the