By weakness (CWE)

CWE-335: related vulnerabilities

CVEs classified under CWE-335. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

2 published vulnerabilities

• CVE-2026-11625HIGH 7.5

  Bytes::Random::Secure, a Perl library for generating cryptographic random numbers, has a critical flaw in how it handles forked processes. When the library is initialized before a process fork or when using its functional interface, the internal random number generator state is duplicated across child processes. This means all forked processes produce identical sequences of random numbers, making secrets generated in multi-process applications predictable and essentially worthless for security purposes.

• CVE-2026-11702HIGH 7.5

  Perl's Bytes::Random::Secure::Tiny library has a flaw where random number generation fails to properly reset when code is forked into multiple processes. If an application initializes the random number generator before spawning child processes, all of those processes will generate identical sequences of random numbers. This means any cryptographic secrets or tokens created across multiple processes become predictable, defeating the security purpose of randomization. The vulnerability affects versions 1.011 and earlier.