CVE-2026-5091
Published
CVSS v3
5.1
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT
Description
Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.
GitHub