Open Source Digest: R & Perl Vulnerabilities, AI Tools, and More
Security Alerts CVE-2026-14570: Crypt::DSA versions before 1.22 for Perl have a biased random generator that leaks the private key. CVE-2026-12740: Plack::Middleware::OAuth through 0.10 for Perl lacks support for OAuth 2.0 state parameter, making CSRF attacks possible. New Tools & Projects gh-suggest: A GitHub CLI extension that converts staged local fixes into pull request suggestions. BrazilCrime: … Read more