CVE-2026-18536

The Data::Entropy Perl module (versions before 0.010 ) is vulnerable to an interception attack because it retrieves remote entropy sources via plain HTTP . Specifically, the Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo sources are accessed without encryption...