Skip to content
Threat Feed
Subscribe

Product

Catalyst::Plugin::Authentication (< 0.10029)

1 brief RSS
high advisory

Catalyst::Plugin::Authentication: Timing attack vulnerability in legacy password verifier (CVE-2026-74846)

Catalyst::Plugin::Authentication for Perl versions prior to 0.10029 are vulnerable to remote timing attacks due to insecure string comparison operators in the legacy password verifier.

Catalyst::Plugin::Authentication
1t 1c