CVE-2025-40916

Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha. That version uses the built-in rand function for generating the captcha text as well as image noise, which is insecure...

CVE-2025-40916

The CVE-2025-40916 entry concerns Mojolicious::Plugin::CaptchaPNG (Perl) v1.05, which uses the built-in rand() for captcha text and image noise, constituting a weak random number source. This root cause is explicitly stated across multiple sources (Red Hat, NVD, CVE lists). Impact is described as...

CVE-2018-18531

text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random rather than SecureRandom function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictio...