CVE-2024-56370

The Net::Xero component for Perl (version 0.044 and earlier ) is vulnerable to the use of a cryptographically weak pseudo-random number generator (PRNG) for cryptographic functions. The root cause is the reliance on the Data::Random library, which uses the rand() function as its entropy source; t...