Veille CVE

Recherche « RRWO Crypt::SaltedHash »

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « RRWO Crypt::SaltedHash » ✕
  1. CVE-2026-47372 9.1 Critique

    RRWO Crypt::SaltedHash

    Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

  2. CVE-2026-47373 7.5 Élevée

    RRWO Crypt::SaltedHash

    Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash.