CVE-2026-75589

creationtimestamp| type| source ---|---|--- 2026-08-19 09:47:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bmavtwts4i5o7 2026-08-19 12:15:20+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-75589...

CVE-2026-75589

The Net::OAuth Perl module (versions before 0.33 ) is vulnerable to a timing attack during signature verification for HMAC-SHA1 , HMAC-SHA256 , and PLAINTEXT methods. The vulnerability stems from using a non-constant-time comparison (the eq operator) in the verify function, where the time taken t...