CVE-2025-22376

In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand function, which is not cryptographically strong...

CVE-2025-22376

The Net::OAuth package for Perl (versions before 0.29 ) is vulnerable because the Net::OAuth::Client component uses a cryptographically weak pseudo-random number generator (PRNG) . Specifically, the default nonce is a 32-bit integer generated from the built-in rand() function, making it predictab...