Amon2 vulnerabilities

1 known vulnerability in Amon2 from Tokuhirom. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Amon2: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2025-15604Mar 28, 2026Tokuhirom

  Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions. In versions 6.06 through 6.16, the random_string function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it gener