JJNAPIORK Catalyst::Plugin::Authentication vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting JJNAPIORK Catalyst::Plugin::Authentication: 1 record(s), with affected versions and fixes.
CVE-2026-5091
Medium · 5.1
CWE-208 May 21, 2026
Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks
Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks.
These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.