CVE-2026-47372

Опубликовано: 20 мая 2026

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts.

These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

Ссылки

EPSS

Процентиль: 32%

0.00397

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-338

Связанные уязвимости

CVE-2026-47372

CVSS3: 9.1

ubuntu

3 месяца назад

Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

CVE-2026-47372

CVSS3: 9.1

debian

3 месяца назад

Crypt::SaltedHash versions through 0.09 for Perl generate insecure ran ...

GHSA-h295-pfx3-r298

CVSS3: 9.1

github

3 месяца назад

Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

openSUSE-SU-2026:20986-1

suse-cvrf

около 2 месяцев назад

Security update for perl-Crypt-SaltedHash

EPSS

Процентиль: 32%

0.00397

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-338