Vulnerabilidades do Nerdvana Crypt::secretbuffer
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Nerdvana Crypt::secretbuffer: 1 registro(s), com versões afetadas e correções.cpe:2.3:a:nerdvana:crypt::secretbuffer
CVE-2026-5086
Alta · 7.5
CWE-208 13/04/2026
Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks
Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks.
For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in timing could be used to guess the secret password.