Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3rw7-pf56-37cv

Опубликовано: 12 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts.

These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts.

These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

EPSS

Процентиль: 22%
0.00305
Низкий

7.5 High

CVSS3

Дефекты

CWE-338

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 2 месяцев назад

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

CVSS3: 7.5
nvd
около 2 месяцев назад

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

CVSS3: 7.5
debian
около 2 месяцев назад

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure rand ...

EPSS

Процентиль: 22%
0.00305
Низкий

7.5 High

CVSS3

Дефекты

CWE-338