VYPR

Concierge-Sessions

by Bwva

CVEs (1)

  • CVE-2026-2439CriFeb 16, 2026
    risk 0.00cvss 9.8epss 0.00

    Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids. The generate_session_id function in Concierge::Sessions::Base defaults to using the uuidgen command to generate a UUID, with a fallback to using Perl's built-in rand function. Neither of…