VYPR

Rex

by Perl Foundation

CVEs (1)

  • CVE-2026-94140Oct 21, 2026
    risk 0.00cvss —epss —

    Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no. Every remote branch of sync builds its ssh command with that option, for password authentication, for private-key authentication and…