Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Crypt-PBKDF2

cpan

The PBKDF2 password hash algorithm

View on github.com · View on metacpan.org

Security Advisories for Crypt-PBKDF2 in cpan

about 1 month ago

Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks. These versions use Perl's built-in eq comparison. Discrepancies in timing could be used to guess the underlying derived-key. CPANSA-Crypt-PBKDF2-2017-20240

cpan Crypt-PBKDF2
about 1 month ago

Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography. CPANSA-Crypt-PBKDF2-2026-9638

cpan Crypt-PBKDF2
about 1 month ago

Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations. The default algorithm is HMAC-SHA1, which should only be used for legacy systems. These versions default to using 1000 iterations. Depending on t... CPANSA-Crypt-PBKDF2-2026-9641

cpan Crypt-PBKDF2

Filter by Severity