Skip to content
OpenAdvisories

Package · Debian

libmojo-jwt-perl

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-9537

    Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison

    Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode() method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comp…

    JBERGER Mojo::JWT libmojo-jwt-perl libmojo-jwt-perl Debian Ubuntu