Security Advisories (1)
CVE-2024-57868 (2025-04-05)

Web::API 2.8 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Web::API uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

Changes for version 1.2

  • Change: 428c946f4c2359cf7b1fedbf147d9017a711792c Author: Tobias Kirschstein <lev@ideegeo.com> Date : 2013-09-24 11:32:24 +0000
    • version bump
  • Change: aa94b17007fd28c86aa84bb17367ec645c4fd4a8 Author: Tobias Kirschstein <lev@ideegeo.com> Date : 2013-09-24 11:31:38 +0000
    • satisfied perlcritic
  • Change: 3619c80ebb7e3a0bc18e05196adac10659409876 Author: Tobias Kirschstein <lev@ideegeo.com> Date : 2013-09-24 11:28:02 +0000
    • debug log to STDERR using separate method, deplaced Data::Dumper with Data::Dump

Modules

Web::API - A Simple base module to implement almost every RESTful API with just a few lines of configuration