Catalyst-Plugin-Authentication vulnerabilities

CVEs whose affected-version data names the Catalyst-Plugin-Authentication package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-74846High· 7.5

5d ago

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier. CVE-2026-5091 was fixed in the realm-based verifier. The legacy verifier, use…

▾ TwilightEPSS 0.40%via CVEORG