Changes for version v0.5.3 - 2026-04-15

  • Security fix (CVE-2026-5088): removed insecure fallback to rand() for salt generation in Apache2::API::Password. Methods _make_salt() and _make_salt_bcrypt() now require either Crypt::URandom or Bytes::Random::Secure to be installed, and return an error if neither is available.

Documentation

Create and verify HTTP Basic Auth password hashes (APR1/bcrypt/SHA-crypt)

Modules

Apache2 API Framework
HTTP DateTime Manipulation and Formatting
Parser and matcher for HTTP Accept header
Common base class for parsing HTTP Accept and Accept-Language headers
Parser and matcher for HTTP Accept-Language header
utf8 compliant URI query string manipulation
Apache2 Incoming Request Access and Manipulation
Apache2 Request Fields Object
Apache2 Request Upload Object
Apache2 Outgoing Response Access and Manipulation
Apache2 Status Codes

Provides

in lib/Apache2/API.pm