CVE-2025-22376
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptograph…
Published: 2025-01-03 · CVSS: 5.3 · CVSS 3.1
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7