CVE-2024-57835

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand function, which is not cryptographically secure...

CVE-2024-57835

The Amon2::Auth::Site::LINE component for Perl (versions through 0.04 ) is vulnerable because it uses the String::Random module to generate nonce values. This module defaults to Perl's built-in rand() function, which is a predictable and non-cryptographically secure random number generator. The u...