Security Advisories (1)

CVE-2025-22376 (2025-01-03)

In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong.

https://metacpan.org/release/KGRENNAN/Net-OAuth-0.28/source/lib/Net/OAuth/Client.pm#L260
https://metacpan.org/release/RRWO/Net-OAuth-0.29/changes

NAME

Net::OAuth::xAuthAccessTokenRequest - xAuth extension

AUTHOR

Keith Grennan, <kgrennan at cpan.org>

CONTRIBUTORS

Masayoshi Sekimura

Simon Wistow

COPYRIGHT & LICENSE

This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

To install Net::OAuth, copy and paste the appropriate command in to your terminal.

cpanm

cpanm Net::OAuth

CPAN shell

perl -MCPAN -e shell
install Net::OAuth

For more information on module installation, please visit the detailed CPAN module installation guide.

	Global
`s`	Focus search bar
`?`	Bring up this help dialog

	GitHub
`g` `p`	Go to pull requests
`g` `i`	Go to GitHub issues (only if GitHub is preferred repository)

	POD
`g` `a`	Go to author
`g` `c`	Go to changes
`g` `i`	Go to issues
`g` `d`	Go to dist
`g` `r`	Go to repository/SCM
`g` `s`	Go to source
`g` `b`	Go to file browse

Search terms
module: (e.g. module:Plugin)
distribution: (e.g. distribution:Dancer auth)
author: (e.g. author:SONGMU Redis)
version: (e.g. version:1.00)

NAME

SEE ALSO

AUTHOR

CONTRIBUTORS

COPYRIGHT & LICENSE

Module Install Instructions

Keyboard Shortcuts