Security Advisories (1)
CVE-2025-22376 (2025-01-03)

In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong.

NAME

Net::OAuth::AccessToken - OAuth Access Token

DESCRIPTION

WARNING: Net::OAuth::AccessToken is alpha code. The rest of Net::OAuth is quite stable but this particular module is new, and is under-documented and under-tested.

SEE ALSO

Net::OAuth

LICENSE AND COPYRIGHT

Copyright 2011 Keith Grennan.

This program is free software; you can redistribute it and/or modify it under the terms of either: the GNU General Public License as published by the Free Software Foundation; or the Artistic License.

See http://dev.perl.org/licenses/ for more information.