TI-2026-08466 CVE-2026-9638 · GHSA-3rw7-pf56-37cv
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts
Priority LOW 39
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts.
No ARODLAND vulnerabilities are listed in CISA KEV.
3 records
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts.
Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations.
Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks.