Solstice::Session vulnerabilities

1 known vulnerability in Solstice::Session from Mcrawfor. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Solstice::Session: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2026-5085Apr 13, 2026Mcrawfor

  Solstice::Session versions through 1440 for Perl generates session ids insecurely. The _generateSessionID method returns an MD5 digest seeded by the epoch time, a random hash reference, a call to the built-in rand() function and the process id. The same method