Approved changes feed: RSS · Atom

cpe:2.3:a:rrwo:crypt::saltedhash:*:*:*:*:*:*:*:*

part: a version: * update: saltedhash

VendorRrwo (b5300a69-c4f4-5cc7-a4bb-65304bf38389)
ProductCrypt (d4d509b2-793f-572d-a87b-00b937d3d3c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-47373 vulnerable 2026-06-08 08:05:12.219873 Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks
Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash.
Published: 2026-05-20T20:25:49.785Z
Updated: 2026-05-21T14:10:59.820Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-47372 vulnerable 2026-06-08 08:05:12.219645 Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
Published: 2026-05-20T22:08:12.703Z
Updated: 2026-05-21T14:12:28.966Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.