CVE-2025-27552

Name of the Vulnerable Software and Affected Versions DBIx::Class::EncodedColumn versions prior to 0.00032

Description The issue arises from the use of the rand() function, which is not cryptographically secure, to salt password hashes. This is associated with program files Crypt/Eksblowfish/Bcrypt.pm.

Recommendations For versions prior to 0.00032, consider updating to a version that uses a cryptographically secure method for salting password hashes. As a temporary workaround, consider restricting the use of password hashing functions associated with DBIx::Class::EncodedColumn until a secure update is available.