Drsteve Crypt::password
2 CVEs affecting Drsteve Crypt::password. Latest disclosed: 2026-07-20. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-16235 | Critical | 9.8 | 2026-07-20 | Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable… |
CVE-2026-6656 | High | 7.5 | 2026-07-20 | Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The check_password method uses the built-in eq operator. This allows discrep… |