CVE-2025-40905 – WWW::OAuth 1.000 and earlier for Perl uses insecure rand() function for cryptographic functions

CVE ID : CVE-2025-40905

Published : Feb. 12, 2026, 11:39 p.m. | 49 minutes ago

Description : WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…