CVE-2026-9692 – Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely

CVE ID :CVE-2026-9692

Published : June 18, 2026, 5:53 p.m. | 1 hour, 49 minutes ago

Description :Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely.

The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address of an anonymous hash, and the PID.

These are predictable or low-entropy sources that are unsuitable for security purposes.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…