Robert Rothenberg

Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator

Apache::SessionX versions through 2.01 for Perl create insecure session id

Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely

Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids

Crypt::RandomEncryption for Perl uses insecure rand() function during encryption

DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Crypt/Eksblowfish/Bcrypt.pm

DBIx::Class::EncodedColumn until 0.00032 for Perl uses insecure rand() function for salting password hashes in Digest.pm

Crypt::Salt for Perl uses insecure rand() function when generating salts for cryptographic purposes

String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string