Changes for version v0.8.8 - 2026-02-13
- Switched session ID generation from Crypt::URandom to Crypt::PRNG (random_bytes), aligning with Concierge::Auth::Generators and reducing overall Concierge suite dependencies
- CVE-2026-2439: Insecure session ID generation via uuidgen/rand fallback was fixed in v0.8.5; this entry documents the assigned CVE
Documentation
Modules
Session manager with factory pattern and multiple backend support
Base class for session storage backends
File backend for session storage
SQLite backend for session storage
Individual session objects for data access and persistence