CyberSecBulletin

Tokuhirom vulnerabilities

We track 2 vulnerabilities in Tokuhirom products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 16, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Tokuhirom vulnerabilities

  • 9.8 Critical severity

    Image::EPEG: Use of Unmaintained Third Party Components

    CVE-2026-3031Tokuhirom

    Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library. Image::EPEG includes Epeg 0.9.0 that was last updated in 2004. Epeg is a fast JPEG thumbnail library that was once part of the Englightenment Project.

  • 9.8 Critical severity

    Amon2: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

    CVE-2025-15604Tokuhirom

    Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions. In versions 6.06 through 6.16, the random_string function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it gener