MiracleLinux 8 : perl-App-cpanminus:1.7044 (5.32) (AXSA:2024-9042:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9042:01 advisory. perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability CVE-2024-45321 Tenable has extracted the preceding description block...

Amazon Linux 2 : perl-App-cpanminus (ALAS-2025-2802)

The version of perl-App-cpanminus installed on the remote host is prior to 1.6922-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2802 advisory. The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass. CVE-2020-16154 Tenable has extracted t...

perl-App-cpanminus:1.7044 security update

An update is available for module.perl-CPAN-DistnameInfo, module.perl-Parse-PMFile, perl-String-ShellQuote, perl-App-cpanminus, perl-File-pushd, module.perl-File-pushd, module.perl-String-ShellQuote, perl-Parse-PMFile, module.perl-App-cpanminus, perl-CPAN-DistnameInfo, module.perl-CPAN-Meta-Check...

perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability

A flaw was found in App::cpanminus cpanm through version 1.7047. The default configuration downloads Perl modules from CPAN using HTTP, which could allow an attacker to view or modify the content without the knowledge of the user. This issue could allow an attacker to execute malicious code if th...

ALSA-2024:10219 Moderate: perl-App-cpanminus:1.7044 security update

The panminus is a script to get, unpack, build and install modules from CPAN. Security Fixes: perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability CVE-2024-45321 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

PT-2024-31572 · Unknown +6 · App::Cpanminus +6

Name of the Vulnerable Software and Affected Versions: App::cpanminus versions 1.7047 and earlier Description: The App::cpanminus package for Perl downloads code via insecure HTTP, enabling code execution for network attackers. This issue allows attackers to intercept traffic. Recommendations: Fo...

USN-5230-1 cpanminus vulnerability

It was discovered that App::cpanminus did not properly verify CHECKSUMS files. An attacker could possibly use this issue to bypass signature verification, gaining access to sensitive data or possibly executing unauthorized code...