CVE-2026-13577

Dancer2 is a lightweight Perl web framework. In versions before 2.2.0 , the Dancer2::Core::Role::SessionFactory::generate_id function silently falls back to a low-entropy, rand()-derived session ID when both Math::Random::ISAAC::XS and Crypt::URandom are not available. The fallback uses a SHA-1 h...