Vendor

ether

10 known vulnerabilities.

Products

etherpad 6 Catalyst::Plugin::Authentication 1 etherpad-lite 1 FCGI 1 Catalyst::Authentication::Credential::HTTP 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.6

CVE-2025-40920

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl use insecurely generated nonces

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library. * Data::UUID does not use a strong cryptographic source for generating UUIDs. * Data::UUID returns v3 UUIDs, which are generated …

ether Catalyst::Authentication::Credential::HTTP libcatalyst-authentication-credential-http-perl libcatalyst-authentication-credential-http-perl Debian Ubuntu

Aug 11, 2025