Vulnerabilities

TI-2026-08469 CVE-2026-9641 · GHSA-v9r4-9w2c-2xcp

Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number…

LOW 29

Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00226 Published 2026-06-12 Fixed in 0.261630 CWE-916

TI-2026-08466 CVE-2026-9638 · GHSA-3rw7-pf56-37cv

LOW 39

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00305 Published 2026-06-12 Fixed in 0.261630 CWE-338

TI-2017-14304 CVE-2017-20240 · GHSA-m538-6wp4-7h22

LOW 26

Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00319 Published 2026-06-12 Fixed in 0.261630 CWE-208