Jdeguest Apache::api::password — known CVE vulnerabilities

Every CVE whose affected-product data names Jdeguest Apache::api::password, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-5088 — CVSS 7.5 (high): Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. The _make_salt and _make_salt_bcrypt…