https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:02:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-292157 EUVD-2026-292157 https://cve.radiocsirt.org/vuln/euvd-2026-292157 https://cve.radiocsirt.org/vuln/fkie_cve-2025-40926 <p>Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely.</p> <p>The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.</p> <p>Predictable session ids could allow an attacker to gain access to systems.</p> <p>Plack::Middleware::Session::Simple is intended to be compatible with Plack::Middleware::Session, which had a similar security issue CVE-2025-40923.</p> <p>Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely.</p> <p>The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.</p> <p>Predictable session ids could allow an attacker to gain access to systems.</p> <p>Plack::Middleware::Session::Simple is intended to be compatible with Plack::Middleware::Session, which had a similar security issue CVE-2025-40923.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-40926 https://cve.radiocsirt.org/vuln/ghsa-g98h-c5v8-8m3f <p>Plack::Middleware::Session::Simple versions through 0.04 for Perl generates session ids insecurely.</p> <p>The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.</p> <p>Predicable session ids could allow an attacker to gain access to systems.</p> <p>Plack::Middleware::Session::Simple is intended to be compatible with Plack::Middleware::Session, which had a similar security issue CVE-2025-40923.</p> <p>Plack::Middleware::Session::Simple versions through 0.04 for Perl generates session ids insecurely.</p> <p>The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.</p> <p>Predicable session ids could allow an attacker to gain access to systems.</p> <p>Plack::Middleware::Session::Simple is intended to be compatible with Plack::Middleware::Session, which had a similar security issue CVE-2025-40923.</p> https://cve.radiocsirt.org/vuln/ghsa-g98h-c5v8-8m3f