critical9.1
CVE-2026-11832
Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce.
Impact
Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The default nonce was generated using an MD5 hash of the epoch time, which is predictable.
Affected products
| Product | Affected versions |
|---|---|
| Dancer2::Plugin::Auth::OAuth | before 0.22 |
Versions were read from the advisory text. No structured product data has been published for this record yet.