Security Advisories (1)
CVE-2024-58041 (2026-02-24)

Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Smolder::DB::Developer uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

NAME

Smolder::Control::Public::Projects

DESCRIPTION

Controller module for public projects. Inherits from Smolder::Control::Developer::Projects, but puts restrictions on what non-developer public users can do.

RUN MODES

show_all

Shows a list of all the public projects.

forbidden

Shows a FORBIDDEN message if a user tries to act on a project that is not marked as 'forbibben'

smoke_reports

Shows a list of smoke reports for a given public project.

This method is provided by Smolder::Control::Developer::Projects.

smoke_report

Shows a single smoke report for a public project.

This method is provided by Smolder::Control::Developer::Projects.

report_details

Shows the details of an uploaded test for a public project in either HTML, XML or YAML.

This method is provided by Smolder::Control::Developer::Projects.

add_report

Shows the form to allow public users (non-developers) to upload a smoke report to a public project.

This method is provided by Smolder::Control::Developer::Projects.

process_add_report

Process the information from the add_report run mode.

This method is provided by Smolder::Control::Developer::Projects.

feed

Will return an XML data feed (Atom) to the browser. The 5 most recent smoke reports for a project are included in this feed. An optional type can also be specified which is can either be all or failures.Only projects that have been marked as enable_feed will appear in any feed.