CVE-2026-46473: Tchatzi Authen::totp

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.

Affected products

• Tchatzi Authen::totp: before 0.1.1 (fixed in 0.1.1)

Published 2026-05-21. Last modified 2026-07-23.