VYPR

Catalyst::Plugin::Authentication

by Perl Foundation

CVEs (1)

  • CVE-2026-5091MedMay 21, 2026
    risk 0.26cvss 5.1epss 0.00

    Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.