CVE Database
/

CVE-2026-5091

Back to search

CVE-2026-5091

Published: May 21, 2026

Modified: May 22, 2026

PUBLISHED

Description

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.

VendorProductVersions

JJNAPIORK

Catalyst::Plugin::Authentication

affected
0 - <= 0.10024

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now