CVE-2025-22376

In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong.

In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong.

En Net::OAuth::Client del paquete Net::OAuth anterior a 0.29 para Perl, el nonce predeterminado es un entero de 32 bits generado a partir de la función rand() incorporada, que no es criptográficamente fuerte.