Vulnerabilidades do DRSTEVE Crypt::Password
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam DRSTEVE Crypt::Password: 2 registro(s), com versões afetadas e correções.
CVE-2026-6656
Alta · 7.5
CWE-208 20/07/2026
Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks
Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks.
The check_password method uses the built-in eq operator. This allows discrepancies in timing to be used to guess the underlying hash.
CVE-2026-16235
Crítica · 9.8
CWE-338 20/07/2026
Crypt::Password versions through 0.28 for Perl generate insecure random values for salts
Crypt::Password versions through 0.28 for Perl generate insecure random values for salts.
These versions use the built-in rand function, which is predictable and unsuitable for cryptography.