CVE-2025-40926

The Plack::Middleware::Session::Simple Perl middleware (versions before 0.05 ) contains a vulnerability where session IDs are generated insecurely. The root cause is the use of a SHA-1 hash seeded with the built-in rand function, the epoch time, and the process ID (PID ). Because the rand functio...