DevSecOps Toolkit

CVE record

CVE-2026-5091

UNKNOWN

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.

Vulnerability metadata

Published
2026-05-21T16:46:48.530Z
Modified
2026-05-21T20:46:34.970Z
EPSS
Not available
Vector
Not available

References