{"id":"CVE-2025-40916","summary":"Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text","details":"Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha.\n\nThat version uses the built-in rand() function for generating the captcha text as well as image noise, which is insecure.","modified":"2026-07-08T07:43:34.821723622Z","published":"2025-06-16T11:01:08.871Z","database_specific":{"cna_assigner":"CPANSec","cwe_ids":["CWE-338","CWE-804"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40916.json"},"references":[{"type":"WEB","url":"https://cpan.org/modules"},{"type":"WEB","url":"https://metacpan.org/pod/perlfunc#rand"},{"type":"WEB","url":"https://metacpan.org/release/GRYPHON/Mojolicious-Plugin-CaptchaPNG-1.04/diff/GRYPHON/Mojolicious-Plugin-CaptchaPNG-1.05/lib/Mojolicious/Plugin/CaptchaPNG.pm"},{"type":"WEB","url":"https://metacpan.org/release/GRYPHON/Mojolicious-Plugin-CaptchaPNG-1.06/changes"},{"type":"WEB","url":"https://security.metacpan.org/docs/guides/random-data-for-security.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40916.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40916"},{"type":"PACKAGE","url":"https://github.com/gryphonshafer/Mojo-Plugin-CaptchaPNG"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gryphonshafer/mojo-plugin-captchapng","events":[{"introduced":"f4069779330217c7a59c752be95d79bff472d56d"},{"last_affected":"f4069779330217c7a59c752be95d79bff472d56d"}],"database_specific":{"extracted_events":[{"introduced":"1.05"},{"last_affected":"1.05"}],"source":"AFFECTED_FIELD"}}],"versions":["1.05","v1.05"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-40916.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}]}