debian/libapache-sessionx-perl vulnerabilities

Latest debian/libapache-sessionx-perl CVEs

Newest publication first

1. CVE-2025-40932 Apache::SessionX versions through 2.01 for Perl create insecure session id

   Published 2026-02-26

   High·CVSS 8.2 EPSS 0.23%

   Apache::SessionX versions through 2.01 for Perl create insecure session id. Apache::SessionX generates session ids insecurely. The default session id generator in Apache::SessionX::Generate::MD5 returns a MD5 hash seeded with the built-in rand() function, the epoch time, and the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.