critical9.8
CVE-2026-16235
Crypt::Password versions through 0.28 for Perl generate insecure random values for salts.
Impact
Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
Affected products
| Product | Affected versions |
|---|---|
| Crypt::Password | through 0.28 |
Versions were read from the advisory text. No structured product data has been published for this record yet.