CVE-2026-18536

Data::Entropy for Perl (Data::Entropy, prior to version 0.010) reads remote entropy sources over plain HTTP via Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo. The integrity check for RandomOrg trivially matches any non-empty string, enabling on-path attackers...