CVE-2024-57835: Nipotan Line Integration For AMON2

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values.  String::Random defaults to Perl's built-in predictable random number generator, the rand() function, which is not cryptographically secure

Affected products

• Nipotan Line Integration For AMON2: before 0.04 (fixed in 0.04)

Published 2025-04-05. Last modified 2026-06-17.