Lucene search
+L

6 matches found

Mageia
Mageia
•added 2026/09/02 4:59 p.m.•14 views

Updated perl-Net-OAuth packages fix security vulnerabilities

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire Net::OAuth versions before 0.3...

9.8CVSS5.9AI score0.00721EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2026/08/18 4:54 p.m.•12 views

SUSE CVE-2026-72887

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

9.8CVSS5.4AI score0.00721EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/08/16 1:50 p.m.•14 views

CVE-2026-72887

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

9.8CVSS5.4AI score0.00721EPSS
SaveExploits0
EUVD
EUVD
•added 2026/08/16 1:50 p.m.•19 views

EUVD-2026-59987

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

5.3AI score0.00721EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/08/16 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-72887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback...

9.8CVSS5.9AI score0.00721EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/16 12:00 a.m.•23 views

PT-2026-73167

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get request token. Passing a callback to the constructor selects OAuth 1.0a. get request token then revokes that choice when the request token response omits oauth callback...

5.3AI score0.00721EPSS
SaveExploits0References6
Rows per page
Query Builder