Product · JJNAPIORK

Catalyst::Plugin::Authentication

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.1

CVE-2026-5091

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.

JJNAPIORK Catalyst::Plugin::Authentication libcatalyst-plugin-authentication-perl libcatalyst-plugin-authentication-perl Debian Ubuntu

May 21, 2026