Vulnerability in Tokuhirom Amon2::plugin::web::csrfdefender

CVE-2026-5082

Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id. The generate_session_id function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it genera…

EPSS: 0.000 (4.4th percentile) — read the EPSS interpretation.