CVE-2026-6656

The Crypt::Password module for Perl , in versions through 0.28 , is vulnerable to timing attacks . The issue originates from the check_password method, which utilizes the built-in eq operator . This choice allows for timing discrepancies that can be exploited to guess the underlying hash. No spec...

CVE-2026-6656

Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The checkpassword method uses the built-in eq operator. This allows discrepancies in timing to be used to guess the underlying hash...