CVE-2026-11832

ANALYSIS PENDING

Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce

Title source: cna

Description

Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The default nonce was generated using an MD5 hash of the epoch time, which is predictable.

References (4)

Core 4

Core References

Release Notes release-notes

https://metacpan.org/release/BIAFRA/Dancer2-Plugin-Auth-OAuth-0.22/changes

https://datatracker.ietf.org/doc/html/rfc5849#section-3.3

https://datatracker.ietf.org/doc/html/rfc5849#section-4.9

Details

CWE

CWE-338

Status published

Products (1)

BIAFRA/Dancer2::Plugin::Auth::OAuth < 0.22

Published Jun 15, 2026

Tracked Since Jun 16, 2026