Skip to content
OpenAdvisories

Package · Ubuntu

libcatalyst-plugin-authentication-perl

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier

    Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier. CVE-2026-5091 was fixed in the realm-based verifier. The legacy verifier, used by the deprecated log…