GCVE - cpe:2.3:a:hayajo:mojolicious::sessions::storable:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hayajo:mojolicious::sessions::storable:*:*:*:*:*:*:*:*

part: a version: update: sessions

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-9692`	vulnerable	2026-07-29 01:12:09.530090	Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address of an anonymous hash, and the PID. These are predictable or low-entropy sources that are unsuitable for security purposes. Published: 2026-06-18T17:53:03.461Z Updated: 2026-06-18T18:47:32.577Z Open on db.gcve.eu Reference links https://security.metacpan.org/patches/M/Mojolicious-Plugin-SessionStore/0.05/CVE-2026-9692-r1.patch https://metacpan.org/release/HAYAJO/Mojolicious-Plugin-SessionStore-0.05/source/lib/Mojolicious/Sessions/Storable.pm#L11-15 https://www.cve.org/CVERecord?id=CVE-2025-40923 https://security.metacpan.org/docs/guides/random-data-for-security.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.