Guimard Apache::session::generate::sha256 — known CVE vulnerabilities

Every CVE whose affected-product data names Guimard Apache::session::generate::sha256, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-8503 — CVSS 6.5 (medium): Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apache::Session::Generate::SHA256 generated…