KTAT vulnerabilities
We track 1 vulnerability in KTAT products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 28, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest KTAT vulnerabilities
- 9.8 Critical severity
HTTP::Session: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids. HTTP::Session defaults to using HTTP::Session::ID::SHA1 to generate session ids using a SHA-1 hash seeded with the built-in rand function, the high resolution epoch