CVE-2026-19565

The Apache::AppSamurai::Util module for Perl (versions through 1.01 ) contains a vulnerability where it generates predictable session authentication keys via the CreateSessionAuthKey function. The root cause is the use of low-entropy inputs, specifically Time::HiRes readings and process IDs , to ...