CVSS 3.1
4.0 mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCVE-2025-27551
Medium (4.0). EPSS 0.1% chance of exploitation in the next 30 days.
DBIx::Class::EncodedColumn use the rand() function, which is not cryptographically secure to salt password hashes.
This vulnerability is associated with program files lib/DBIx/Class/EncodedColumn/Digest.pm.
This issue affects DBIx::Class::EncodedColumn until 0.00032.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-331, CWE-338, CWE-916
- Published
- Modified
- Record from
- the NVD, synced