Apache vulnerabilities

1 known vulnerability in Apache from Jdeguest. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache::API::Password: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2026-5088Apr 15, 2026Jdeguest

  Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. The _make_salt and _make_salt_bcrypt methods will attept to load Crypt::URandom and then Bytes::Random::Secure to generate random bytes for the salt. If those