CVE-2026-19565

Apache::AppSamurai::Util (Perl, versions through 1.01 ) contains a vulnerability in CreateSessionAuthKey that generates predictable session authentication keys. The function derives keys from Time::HiRes microsecond readings and the process ID , both of which have a small entropy space. Since Cre...