Product

Google::Auth (0.11-0.12)

1 brief RSS

Google::Auth for Perl: SSRF and OAuth state validation vulnerabilities (CVE-2026-74759, CVE-2026-74760)

The Google::Auth Perl module is vulnerable to server-side request forgery (SSRF) via unvalidated AWS credential URLs (CVE-2026-74759) and an OAuth authorization bypass (CVE-2026-74760) due to missing state validation in the gcloud-auth login callback.

Google::Auth vulnerability perl oauth ssrf

2c 1h ago