19071 matches found
CVE-2026-73193 affecting package perl-DBI for versions less than 1.652-1
CVE-2026-73193 affecting package perl-DBI for versions less than 1.652-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-78619
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totpuserecovery compares user identifiers numerically. The helper searches the recovery model for the submitted code's digest alone, across every user's rows, so the ownersh...
CVE-2026-78655
Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session. The POST handler on challengepath keeps the failure count as tries inside the totppending record in...
CVE-2026-78655
Punk::Plugin::TOTP (Perl) versions before 0.05 allow an attacker to bypass the TOTP second-factor attempt limit by replaying a previously saved session cookie. Because Punk::Session stores the failure counter inside a signed client-side cookie, a saved cookie from before the failed attempts resto...
CVE-2026-78619
Punk::Plugin::TOTP versions before 0.05 for Perl contain a critical (CVSS 9.8) flaw in the recovery code verification path. The totp_use_recovery helper searches recovery records by code digest across all users, then performs an ownership check that compares user_id values through Perl's integer ...
CVE-2026-78619 Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totpuserecovery compares user identifiers numerically. The helper searches the recovery model for the submitted code's digest alone, across every user's rows, so the ownersh...
USN-8675-1 perl vulnerabilities
It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an out-of-bounds heap read, resulting in information disclosure. CVE-2026-12087 It was discovered that Perl incorrectly handled regular expressions...
USN-8675-1: Perl vulnerabilities
It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an out-of-bounds heap read, resulting in information disclosure. CVE-2026-12087 It was discovered that Perl incorrectly handled regular expressions...
[SECURITY] Fedora 43 Update: perl-URI-5.36-1.fc43
This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 and updated by RFC 2732...
Fedora 43 : perl-URI (2026-09941e744b)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-09941e744b advisory. 5.36 - Apply Unicode NFC normalization in URI::idna nameprep so IDNA host encoding matches other clients instead of emitting a non-standard, non-round-trippi...
PT-2026-81863
Name of the Vulnerable Software and Affected Versions Punk::Plugin::TOTP versions prior to 0.05 Description The software incorrectly validates recovery codes during the two-factor authentication challenge. The totp use recovery function searches the recovery model for a submitted code's digest...
ROOT-OS-DEBIAN-13-CVE-2026-57433 CVE-2026-57433 in perl - Patched by Root
Root has patched CVE-2026-57433 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-48959 CVE-2026-48959 in perl - Patched by Root
Root has patched CVE-2026-48959 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-48962 CVE-2026-48962 in perl - Patched by Root
Root has patched CVE-2026-48962 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-48961 CVE-2026-48961 in perl - Patched by Root
Root has patched CVE-2026-48961 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-15649 CVE-2025-15649 in perl - Patched by Root
Root has patched CVE-2025-15649 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-7010 CVE-2026-7010 in perl - Patched by Root
Root has patched CVE-2026-7010 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-57432 CVE-2026-57432 in perl - Patched by Root
Root has patched CVE-2026-57432 in the perl package for Root:Debian:13. Multiple fixed versions available...