libcatalyst-plugin-authentication-perl

3 results · Feed

• High 7.5
  CVE-2026-74846

  Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier

  Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier. CVE-2026-5091 was fixed in the realm-based verifier. The legacy verifier, used by the deprecated log…

  libcatalyst-plugin-authentication-perl libcatalyst-plugin-authentication-perl Debian Ubuntu
  Nov 3, 2026
• Critical 9.1
  CVE-2009-10007

  Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks

  Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not automatically change the session id after authentication. An attacker that obtains a session id cookie can…

  ether Catalyst::Plugin::Authentication libcatalyst-plugin-authentication-perl libcatalyst-plugin-authentication-perl Debian Ubuntu
  Jun 9, 2026
• Medium 5.1
  CVE-2026-5091

  Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks

  Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.

  JJNAPIORK Catalyst::Plugin::Authentication libcatalyst-plugin-authentication-perl libcatalyst-plugin-authentication-perl Debian Ubuntu
  May 21, 2026