/ 
Crypt-SaltedHash-0.07
Security Advisories (2)
CVE-2026-47372 (2026-05-20)

Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

CVE-2026-47373 (2026-05-20)

Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash.

Changes for version 0.07

  • switch to use Dist::Zilla
  • fix bug with failed regex and localization of $1
  • handle some uninitialized variables
  • RT Bug #78505 for Crypt-SaltedHash: Noisy tests (Unescaped left brace in regex is deprecated)
  • RT Bug #85627 for Crypt-SaltedHash: [PATCH] POD fix

Modules

Crypt::SaltedHash
Perl interface to functions that assist in working with salted hashes.

Other files