https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 13:09:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-278469 EUVD-2026-278469 https://cve.radiocsirt.org/vuln/euvd-2026-278469 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5087 <p>PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely.</p> <p>PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails (for example, on systems without the device, such as Windows), then it will emit a warning that recommends the user install Crypt::URandom, and then return a string of random bytes generated by the built-in rand function, which is unsuitable for cryptographic applications.</p> <p>This modules does not use the Crypt::URandom module, and installing it will not fix the problem.</p> <p>The random bytes are used for generating an initialisation vector (IV) to encrypt the cookie.</p> <p>A predictable IV may make it easier for malicious users to decrypt and tamper with the session data that is stored in the cookie.</p> <p>PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely.</p> <p>PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails (for example, on systems without the device, such as Windows), then it will emit a warning that recommends the user install Crypt::URandom, and then return a string of random bytes generated by the built-in rand function, which is unsuitable for cryptographic applications.</p> <p>This modules does not use the Crypt::URandom module, and installing it will not fix the problem.</p> <p>The random bytes are used for generating an initialisation vector (IV) to encrypt the cookie.</p> <p>A predictable IV may make it easier for malicious users to decrypt and tamper with the session data that is stored in the cookie.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-5087 https://cve.radiocsirt.org/vuln/ghsa-r6mr-wmgj-f864 <p>PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely.</p> <p>PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails (for example, on systems without the device, such as Windows), then it will emit a warning that recommends the user install Crypt::URandom, and then return a string of random bytes generated by the built-in rand function, which is unsuitable for cryptographic applications.</p> <p>This modules does not use the Crypt::URandom module, and installing it will not fix the problem.</p> <p>The random bytes are used for generating an initialisation vector (IV) to encrypt the cookie.</p> <p>A predictable IV may make it easier for malicious users to decrypt and tamper with the session data that is stored in the cookie.</p> <p>PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely.</p> <p>PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails (for example, on systems without the device, such as Windows), then it will emit a warning that recommends the user install Crypt::URandom, and then return a string of random bytes generated by the built-in rand function, which is unsuitable for cryptographic applications.</p> <p>This modules does not use the Crypt::URandom module, and installing it will not fix the problem.</p> <p>The random bytes are used for generating an initialisation vector (IV) to encrypt the cookie.</p> <p>A predictable IV may make it easier for malicious users to decrypt and tamper with the session data that is stored in the cookie.</p> https://cve.radiocsirt.org/vuln/ghsa-r6mr-wmgj-f864