High severity7.8NVD Advisory· Published Dec 13, 2021· Updated Jun 17, 2026
CVE-2020-16156
CVE-2020-16156
Description
CPAN 2.28 allows Signature Verification Bypass.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:perl:comprehensive_perl_archive_network:2.28:-:*:*:*:perl:*:*+ 1 more
- cpe:2.3:a:perl:comprehensive_perl_archive_network:2.28:-:*:*:*:perl:*:*
- cpe:2.3:a:perl:comprehensive_perl_archive_network:2.28:trial:*:*:*:perl:*:*
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
- CPAN/CPANdescription
Patches
Vulnerability mechanics
References
6- blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.htmlnvdExploitThird Party Advisory
- blog.hackeriet.no/cpan-signature-verification-vulnerabilities/nvdExploitThird Party Advisory
- metacpan.org/pod/distribution/CPAN/scripts/cpannvdProductThird Party Advisory
- lists.debian.org/debian-lts-announce/2024/10/msg00017.htmlnvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SD6RYOJII7HRJ6WVORFNVTYNOFY5JDXN/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC/nvd
News mentions
0No linked articles in our index yet.