CVE-2026-75589

creationtimestamp| type| source ---|---|--- 2026-08-19 09:47:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bmavtwts4i5o7 2026-08-19 12:15:20+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-75589...

CVE-2026-75589

Net::OAuth versions before 0.33 for Perl are vulnerable to a timing side-channel in the verify method. The HMAC-SHA1, HMAC-SHA256, and PLAINTEXT signature checks use Perl's eq operator, which returns as soon as a mismatch is found, causing response time to vary with the length of the matching pre...