https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T03:54:37.333022+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-9692 CVE-2026-9692 — Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely 2026-10-07T03:54:37.348710+00:00

Affected: HAYAJO Mojolicious::Sessions::Storable

Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely.

The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address of an anonymous hash, and the PID.

These are predictable or low-entropy sources that are unsuitable for security purposes.