medium5.1
CVE-2026-5091
Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks.
Impact
Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.
Affected products
| Product | Affected versions |
|---|---|
| Catalyst::Plugin::Authentication | through 0.10024 |
Versions were read from the advisory text. No structured product data has been published for this record yet.