Medium severity5.3NVD Advisory· Published Jan 3, 2025· Updated Apr 15, 2026
CVE-2025-22376
CVE-2025-22376
Description
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <0.29
Patches
Vulnerability mechanics
References
7- datatracker.ietf.org/doc/html/rfc5849nvd
- datatracker.ietf.org/doc/html/rfc5849nvd
- github.com/keeth/Net-OAuth/commit/2aa25e04aadab247ae4063363fcee177161e1f42nvd
- metacpan.org/release/KGRENNAN/Net-OAuth-0.28/source/lib/Net/OAuth/Client.pmnvd
- metacpan.org/release/RRWO/Net-OAuth-0.29/changesnvd
- metacpan.org/release/RRWO/Net-OAuth-0.29/diff/KGRENNAN/Net-OAuth-0.28nvd
- www.vulnarium.com/blogpost-2025-01-05nvd
News mentions
0No linked articles in our index yet.