Security Advisories (1)
CVE-2026-46474 (2026-05-15)

Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.

Changes for version 1.005 - 2024-06-18

  • Re-factor & remove false-negatives
  • Add the return_when parameter to validate_otp

Documentation

Modules

Fork of Authen::TOTP