CVE-2025-40905
WWW::OAuth 1.000 and earlier for Perl uses insecure rand() function for cryptographic functions
WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.
CVSS 3.1 · 7.3 High
EPSS < 1%
KEV · Not listed
Vendors
Products