Security Advisories (1)
CVE-2024-57868 (2025-04-05)

Web::API 2.8 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Web::API uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

Changes for version 1.1

  • Change: 6c464fc222409ef07994be2c376d37cdd7b81dd1 Author: Tobias Kirschstein <lev@ideegeo.com> Date : 2013-09-16 16:15:50 +0000
    • version bump, documentation update
  • Change: a349b52d00d4a19da4cc215c4d35994131c6d84f Author: Tobias Kirschstein <lev@ideegeo.com> Date : 2013-09-16 16:15:34 +0000
    • introduced switch to disable oauth post body override. try to parse resposne and include header + code in answer even on error

Modules

Web::API - A Simple base module to implement almost every RESTful API with just a few lines of configuration