Nerdvana vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Nerdvana products: 1 record(s), with severity, exploitation and fixes.

Crypt::secretbuffer 1

Exploited only (KEV) →

CVE-2026-5086 High · 7.5 CWE-208 Apr 13, 2026

Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks

Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in timing could be used to guess the secret password.