Mojolicious::Plugin::CSRF vulnerabilities

1 known vulnerability in Mojolicious::Plugin::CSRF from GRYPHON. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Mojolicious::Plugin::CSRF: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2025-40915Jun 11, 2025GRYPHON

  Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens. That version of the module generates tokens as an MD5 of the process id, the current time, and a single call to the built-in rand() function.