Jack Lloyd Botan encryption issue vulnerability

Versions 3.7.0 through 3.13.0 of Jack Lloyd Botan contain an encryption-related vulnerability. This flaw arises because AutoSeededRNG, when processing an empty output buffer without seeding, fails to consult its configured entropy source; as a result, it marks itself as seeded. Additionally, the...

PT-2026-67133

Name of the Vulnerable Software and Affected Versions Data::Entropy versions prior to 0.010 Description Remote entropy sources are accessed over plain HTTP, which allows an on-path attacker to substitute the response. This enables the attacker to control the bytes returned by the rand bits and ra...