high7.5
CVE-2026-46473
Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand.
Impact
Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
Affected products
| Product | Affected versions |
|---|---|
| Authen::TOTP | before 0.1.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.