Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:catalyst_project:catalyst-Plugin-Authentication:*:*:*:*:*:perl:*:*

1 brief RSS
high advisory

Catalyst::Plugin::Authentication: Timing attack vulnerability in legacy password verifier (CVE-2026-74846)

Catalyst::Plugin::Authentication for Perl versions prior to 0.10029 are vulnerable to remote timing attacks due to insecure string comparison operators in the legacy password verifier.

Catalyst::Plugin::Authentication
1t 1c