CVE Intelligence

Nerdvana Crypt::secretbuffer vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Nerdvana Crypt::secretbuffer: 1 record(s), with affected versions and fixes.
cpe:2.3:a:nerdvana:crypt::secretbuffer

CVE-2026-5086 High · 7.5 CWE-208 Apr 13, 2026
Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks
Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in timing could be used to guess the secret password.