debian/libdata-entropy-perl vulnerabilities

Latest debian/libdata-entropy-perl CVEs

Newest publication first

1. CVE-2026-18536 Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP

   Published 2026-08-01

   High·CVSS 7.5 EPSS 0.20%

   Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. The Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo remote sources are accessed over plain HTTP. The Data::Entropy::RawSource::RandomOrg integrity check t...

2. DLA-4100-1 libdata-entropy-perl - security update

   Published 2025-03-31

   Unknown

3. CVE-2025-1860 Data::Entropy for Perl uses insecure rand() function for cryptographic functions

   Published 2025-03-28

   High·CVSS 7.7 EPSS 0.19%

   Data::Entropy for Perl 0.007 and earlier use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.