Mojolicious::Plugin::CaptchaPNG vulnerabilities

1 known vulnerability in Mojolicious::Plugin::CaptchaPNG from GRYPHON. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Mojolicious::Plugin::CaptchaPNG: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2025-40916Jun 16, 2025GRYPHON

  Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha. That version uses the built-in rand() function for generating the captcha text as well as image noise, which is insecure.