Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-47373 1 Rrwo 1 Crypt::saltedhash 2026-05-21 N/A
Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash.
CVE-2026-47372 1 Rrwo 1 Crypt::saltedhash 2026-05-21 N/A
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.