Skip to content
OpenAdvisories

Package · Debian

libcgi-session-perl

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-56016

    CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources

    CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The generate_id method builds the session id from a MD5 digest of the process id, the epoch time, and the built-in rand() function. All three are pr…

    MARKSTOS CGI::Session::ID::md5 libcgi-session-perl libcgi-session-perl Debian Ubuntu Alpine