Security Advisories (1)
CVE-2024-58041 (2026-02-24)

Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Smolder::DB::Developer uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

NAME

Smolder::DB::Developer

DESCRIPTION

Class::DBI based model class for the 'developer' table in the database.

METHODS

ACCESSSOR/MUTATORS

Each column in the borough table has a method with the same name that can be used as an accessor and mutator.

The following columns will return objects instead of the value contained in the table:

preference

This is their default, Smolder::DB::Preference object.

project_developers

Returns a list of Smolder::DB::ProjectDeveloper objects that are connected to this Developer.

smoke_reports

A list of Smolder::DB::SmokeReport that were added by this Developer.

OBJECT METHODS

project_pref

Given a Smolder::DB::Project object, this returns the Smolder::DB::Preference object associated with that project and this Developer.

full_name

Returns the full name of the Developer, in the following format:

First Last

email_hidden

Returns the email address in HTML formatted to foil email harvesting bots. For example, the email address

test@example.com

Will become

TODO

reset_password

Creates a new random password of between 6 and 8 characters suitable and sets it as this Developer's password. This new password is returned unencrypted.

projects

Returns an array ref of all the Smolder::DB::Projects that this Developer is a member of (using the project_developer join table).

groups

Returns the names of the groups this developer is in

CLASS METHODS

get_guest

This method will return a user 'anonymous' who is marked as a 'guest'. If this user does not exist, one will be created.