karenetheridge/Crypt-Random-Source

karenetheridge/Crypt-Random-Source

GitHubGitHub
GitHubgithub.com
metacpan.orgmetacpan.org
Releases15
Frequency8 months 1 week
Last Release
Get weak or strong random data from pluggable sources
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-25107↗
7.5 HIGH—

The Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, which is not a secure source of random bits.