Security Advisories (1)
CVE-2024-57868 (2025-04-05)

Web::API 2.8 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Web::API uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

Changes for version 1.8

  • Change: f0fb24d872d7a4126ab1fece6a025bd49c61c65e Author: Tobias Kirschstein <lev@ideegeo.com> Date : 2014-03-28 00:20:27 +0000
    • make empty/no extension work by removing defined() test
  • Change: 81b80bc26510b61229d699f84d89350415e58699 Author: Tobias Kirschstein <lev@ideegeo.com> Date : 2014-03-28 00:18:36 +0000
    • fixed missing POD for auth_type

Modules

Web::API - A Simple base module to implement almost every RESTful API with just a few lines of configuration