CVE-2025-40916
Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text
Summary
Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text
Original description
The description as published by the source.
Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha.
That version uses the built-in rand() function for generating the captcha text as well as image noise, which is insecure.
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web cpan.org
- web metacpan.org
- web metacpan.org
- web metacpan.org
- web security.metacpan.org