Veille CVE

Recherche « DRSTEVE Crypt::Password »

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « DRSTEVE Crypt::Password » ✕
  1. CVE-2026-6656 7.5 Élevée

    DRSTEVE Crypt::Password

    Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The check_password method uses the built-in eq operator. This allows discrepancies in timing to be used to guess the underlying hash.

  2. CVE-2026-16235 9.8 Critique

    DRSTEVE Crypt::Password

    Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.