CVE-2024-58041

Name of the Vulnerable Software and Affected Versions Smolder versions through 1.51

Description Smolder for Perl versions through 1.51 utilizes an insecure rand() function for cryptographic operations. Specifically, Smolder::DB::Developer employs the Data::Random library, which relies on the rand() function and is intended primarily for testing purposes, not for secure cryptographic applications. The rand() function is not a cryptographically secure source of entropy.

Recommendations Versions prior to 1.52 should be updated.