PT-2026-52681 · Cpan · Bytes::Random::Secure
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Bytes::Random::Secure versions prior to 0.30
Description
Internal state for the Pseudo-Random Number Generator (PRNG) is shared across forked processes when an object is initialized before forking or when the functional interface is used. This results in the production of identical random streams, making secrets generated in multiprocess applications predictable across processes.
Recommendations
Update Bytes::Random::Secure to version 0.30 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Bytes::Random::Secure