CVE-2024-58041Disclosure(wonko / smolder)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Smolder::DB::Developer uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

wonko CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-338

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

smolder

Threat summary

5 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 3d ago at 2 mentions (2026-02-24); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

wonko

Products

smolder

Deep dive

Activity timeline5 mentions / 4d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-24	2	Disclosure1General1
2026-02-27	1	Disclosure1
2026-02-28	1	Disclosure1
2026-03-01	1	Disclosure1

Full discourse5 posts

CRAC Learning - Tech@cracbot223d
Disclosure
CVE-2024-58041 (CVSS:9.1, CRITICAL) is Awaiting Analysis. Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earl..https://nvd.nist.gov/vuln/detail/CVE-2024-58041 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2024-58041 is a critical vulnerability in Smolder 1.51 and earlier due to insecure rand() usage for cryptographic functions, with no PoC, exploit, or patch mentioned yet.
0000057
173 followersView on X
CRAC Learning - Tech@cracbot224d
Disclosure
CVE-2024-58041 (CVSS:9.1, CRITICAL) is Awaiting Analysis. Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earl..https://nvd.nist.gov/vuln/detail/CVE-2024-58041 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2024-58041, a critical vulnerability in Smolder 1.51 caused by use of an insecure random number generator in cryptographic functions, and notes it is awaiting analysis.
0000045
173 followersView on X
CRAC Learning - Tech@cracbot225d
Disclosure
CVE-2024-58041 (CVSS:9.1, CRITICAL) is Awaiting Analysis. Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earl..https://nvd.nist.gov/vuln/detail/CVE-2024-58041 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2024-58041 is a critical vulnerability (CVSS 9.1) affecting Smolder 1.51 and earlier for Perl, caused by the use of an insecure rand() function in cryptographic operations, and is currently awaiting further analysis.
0000043
173 followersView on X
CVE@CVEnew228d
Disclosure
CVE-2024-58041 Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the d… https://www.cve.org/CVERecord?id=CVE-2024-58041
Post summary
CVE-2024-58041 affects Smolder 1.51 and earlier for Perl by using the insecure rand() function for cryptographic purposes, with no PoC, exploit, or patch mentioned.
00000177
56.5K followersView on X
CVEarity@CVEarity228d
General
⚡ New CVE Alert: CVE-2024-58041 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-58041 #CVE-2024-58041 #CVE #CyberSecurity #InfoSec https://t.co/epIA9wLF5U
Post summary
The tweet merely announces the existence of CVE‑2024‑58041 with no additional technical or operational details.
0000060
57 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	wonko	smolder	-	perl	-

Explore more

Back to dashboard wonko CVEs smolder vulnerabilities

What researchers are saying

CVE-2024-58041

CRAC Learning - Tech@cracbotDisclosure

CVE-2024-58041 is a critical vulnerability in Smolder 1.51 and earlier due to insecure rand() usage for cryptographic functions, with no PoC, exploit, or patch mentioned yet.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2024-58041, a critical vulnerability in Smolder 1.51 caused by use of an insecure random number generator in cryptographic functions, and notes it is awaiting analysis.

CRAC Learning - Tech@cracbotDisclosure

CVE-2024-58041 is a critical vulnerability (CVSS 9.1) affecting Smolder 1.51 and earlier for Perl, caused by the use of an insecure rand() function in cryptographic operations, and is currently awaiting further analysis.

CVE@CVEnewDisclosure

CVE-2024-58041 affects Smolder 1.51 and earlier for Perl by using the insecure rand() function for cryptographic purposes, with no PoC, exploit, or patch mentioned.

CVEarity@CVEarityGeneral

The tweet merely announces the existence of CVE‑2024‑58041 with no additional technical or operational details.