CVE-2025-22376

In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand function, which is not cryptographically strong...

CVE-2025-22376

Net::OAuth::Client in the Perl Net::OAuth package before 0.29 uses a 32-bit nonce generated from rand(), not cryptographically strong, risking nonce predictability in OAuth flows. Affected: Perl Net-OAuth