Threats affecting pkg:github/Crypt-PasswdMD5

Crypt::PasswdMD5 versions through 1.42 for Perl use the built-in rand function to generate salts, which is cryptographically weak and predictable. This vulnerability (CVE-2026-6659) results in insecure random values for salts, weakening the cryptographic strength of password hashing. The issue is classified under CWE-338 for use of a weak pseudo-random number generator. No official patch or remediation has been indicated yet.