CVE-2025-1860: Zefram Data::entropy

High severity, CVSS 7.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Data::Entropy for Perl 0.007 and earlier use the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.

Affected products

• Zefram Data::entropy: before 0.008 (fixed in 0.008)

Published 2025-03-28. Last modified 2026-06-17.