Security Advisories (1)
CVE-2025-22376 (2025-01-03)

In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong.

Changes for version 0.02

  • Added RSA-SHA1 support

Modules

An OAuth protocol request for an Access Token
An OAuth protocol request for a Protected Resource
base class for OAuth requests
An OAuth protocol request for a Request Token
HMAC_SHA1 Signature Method for OAuth protocol
PLAINTEXT Signature Method for OAuth protocol
RSA_SHA1 Signature Method for OAuth protocol