Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 24, 2026 · NIST NVD

   Detected

   Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Smolder::DB::Developer uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Dat

2. Jun 17, 2026 · NIST NVD

   Updated

   Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Smolder::DB::Developer uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Dat

Affected

• cpe wonko/smolderversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2024-58041

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2024-58041

  Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Smolde

  nvd.nist.gov

References

• Issue Tracking · metacpan.org
• Issue Tracking · metacpan.org
• Issue Tracking · metacpan.org
• Third Party Advisory · perldoc.perl.org
• Third Party Advisory · security.metacpan.org