CVE-2025-40905
WWW::OAuth 1.000 and earlier for Perl uses insecure rand() function for cryptographic functions
Summary
WWW::OAuth 1.000 and earlier for Perl uses insecure rand() function for cryptographic functions
Original description
The description as published by the source.
WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-40905 libwww-oauth-perl
References
- advisory github.com
- advisory nvd.nist.gov
- web openwall.com
- web cpan.org
- web metacpan.org
- web perldoc.perl.org
- web security.metacpan.org