CVE-2025-40920

The Catalyst::Authentication::Credential::HTTP Perl module (versions 1.018 and earlier ) is vulnerable to the generation of predictable nonces. The root cause is the use of the Data::UUID library, which fails to use a strong cryptographic source and returns v3 UUIDs generated from known informati...