Mojolicious::Plugin::Web::Auth::OAuth2 vulnerabilities

1 known vulnerability in Mojolicious::Plugin::Web::Auth::OAuth2 from HAYAJO. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Mojolicious::Plugin::Web::Auth::OAuth2: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2026-9733Jun 23, 2026HAYAJO

  Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter. When no state generator is specified in the constructor, the module defaults to using a SHA-1 hash of predictable and low-entropy sources, including