GRYPHON vulnerabilities
We track 2 vulnerabilities in GRYPHON products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 16, 2025.
2vulnerabilities
1critical
1high
0exploited
8.1average CVSS score
Latest GRYPHON vulnerabilities
- 9.1 Critical severity
Mojolicious::Plugin::CaptchaPNG: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha. That version uses the built-in rand() function for generating the captcha text as well as image noise, which is insecure.
- 7.0 High severity
Mojolicious::Plugin::CSRF: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens. That version of the module generates tokens as an MD5 of the process id, the current time, and a single call to the built-in rand() function.