CVE-2025-40905

WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.

The following products are affected by CVE-2025-40905 vulnerability.

No data.

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-40905.

URL	Resource
https://metacpan.org/release/DBOOK/WWW-OAuth-1.000/source/lib/WWW/OAuth.pm#L86
https://perldoc.perl.org/functions/rand
https://security.metacpan.org/docs/guides/random-data-for-security.html