CVE-2025-40916
Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text
Résumé
Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha.
That version uses the built-in rand() function for generating the captcha text as well as image noise, which is insecure.
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web cpan.org
- web metacpan.org
- web metacpan.org
- web metacpan.org
- web security.metacpan.org