PatchSiren

TOKUHIROM CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM TOKUHIROM CVE published 2026-04-08

CVE-2026-5082

CVE-2026-5082 is a vulnerability in Amon2::Plugin::Web::CSRFDefender versions 7.00 through 7.03 for Perl. The generate_session_id function attempts to read from /dev/urandom but falls back to a weak method using SHA-1 hash with the built-in rand() function, PID, and epoch time. This approach can lead to predictable session IDs. The vulnerability has a medium severity and affects users of Amon2::Plugin::We [truncated]