Security Advisory

CVE-2026-11832

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-15 21:19:07
Last updated 2026-06-16 16:05:26
Assigner CPANSec
CVSS score not scored
State PUBLISHED

Description

Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The default nonce was generated using an MD5 hash of the epoch time, which is predictable.