CVE Intelligence

BIAFRA Dancer2::Plugin::Auth::OAuth vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting BIAFRA Dancer2::Plugin::Auth::OAuth: 1 record(s), with affected versions and fixes.

CVE-2026-11832 Critical · 9.1 CWE-338 Jun 15, 2026
Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce
Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The default nonce was generated using an MD5 hash of the epoch time, which is predictable.