CVE-2026-75589

creationtimestamp| type| source ---|---|--- 2026-08-19 09:47:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bmavtwts4i5o7 2026-08-19 12:15:20+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-75589...

CVE-2026-75589

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the three compares the signature carried in the message against the locally computed one with the eq operator, which returns as soon as the two...