VYPR

CGI::Session::ID::md5

by Perl Foundation

CVEs (1)

  • CVE-2026-56016MedJul 1, 2026
    risk 0.38cvss 5.9epss 0.00

    CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generate_id method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand() function. All three are predictable,…