rpm package
opensuse/perl-Mojo-JWT&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/perl-Mojo-JWT&distro=openSUSE%20Tumbleweed
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-9537 | Med | 5.3 | < 1.20.0-2.1 | 1.20.0-2.1 | Jul 17, 2026 | Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode() method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies w |
- affected < 1.20.0-2.1fixed 1.20.0-2.1
Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode() method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies w