CVE-2026-13082
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
17/07/2026
Last modified:
17/07/2026
Description
GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets.<br />
<br />
The random method creates the challenge text used for the CAPTCHA by sampling characters from an array using Perl&#39;s built-in rand function, and generates a (by default) six-character string.<br />
<br />
The built-in rand function is unsuitable for security applications because it is predictable and reversible.
Impact
Base Score 3.x
5.30
Severity 3.x
MEDIUM