CVE-2026-46473

The Authen::TOTP Perl module (versions prior to 0.1.1 ) is vulnerable to insufficient entropy because it uses the built-in Perl rand function to generate secrets. Since this function is predictable , it is unsuitable for security-sensitive operations. The impact is a HIGH base severity (CVSS 3.1:...

CVE-2026-46473 Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand

Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage...