Arodland

3 CVEs in 1 Arodland product, including Crypt::pbkdf2. Newest: CVE-2026-9641 (2026-06-12). Severity, EPSS and public exploits for each.

Arodland products with known CVEs

ProductCVEs
Crypt::pbkdf23
Arodland CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-9641Medium5.32026-06-12Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations. The default algorithm is HMAC-SHA1, which should only…
CVE-2026-9638High7.52026-06-12Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable…
CVE-2017-20240Medium5.92026-06-12Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks. These versions use Perl's built-in eq comparison. Discrepancies in timing co…