18032 matches found
CVE-2026-6656
CVE-2026-6656 affects Crypt::Password for Perl up to version 0.28. The vulnerability arises in check_password, which uses the built-in eq operator, enabling timing differences to leak information about the underlying hash and facilitating a timing attack. Reported CVSS v3.1 base score is 7.5 (HIG...
CVE-2026-6656 Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks
Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The checkpassword method uses the built-in eq operator. This allows discrepancies in timing to be used to guess the underlying hash...
CVE-2026-6656
Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks. The checkpassword method uses the built-in eq operator. This allows discrepancies in timing to be used to guess the underlying hash...
PT-2026-61695
Name of the Vulnerable Software and Affected Versions Net::DNS versions prior to 1.56 Description Remote execution injection is possible via EDNS EXTENDED ERROR. The function decompose in Net::DNS::RR::OPT::EXTENDED ERROR parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option by tokenizing...
UBUNTU-CVE-2026-9537
Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a...
UBUNTU-CVE-2026-13082
GD::SecurityImage versions through 1.75 for Perl use rand to generate...
Updated perl-Bytes-Random-Secure package fixes a security vulnerability
The updated package fixes a security vulnerability: Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. CVE-2026-11625...
Updated perl-String-Util package fixes a security vulnerability
The updated package fixes a security vulnerability: String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. CVE-2026-14895...
Updated perl-CSS-Minifier-XS package fixes a security vulnerability
The updated package fixes a security vulnerability: CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. CVE-2026-13593...
Updated perl-Mojolicious package fixes a security vulnerability
The updated package fixes a security vulnerability: Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. CVE-2026-14803...
MGASA-2026-0267 Updated perl-CSS-Minifier-XS package fixes a security vulnerability
The updated package fixes a security vulnerability: CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. CVE-2026-13593...
MGASA-2026-0269 Updated perl-Mojolicious package fixes a security vulnerability
The updated package fixes a security vulnerability: Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. CVE-2026-14803...
MGASA-2026-0272 Updated perl-String-Util package fixes a security vulnerability
The updated package fixes a security vulnerability: String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service. CVE-2026-14895...
MGASA-2026-0266 Updated perl-Bytes-Random-Secure package fixes a security vulnerability
The updated package fixes a security vulnerability: Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes. CVE-2026-11625...
perl-DBI-1.651.0-1.1 on GA media (moderate)
perl-DBI-1.651.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11298-1 Rating: moderate Cross-References: CVE-2026-15043 CVE-2026-15392 CVE-2026-60081 CVE-2026-60082 CVSS scores: CVE-2026-15043 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2026-15043 SUSE : 6.9...
Updated perl-HTML-Parser packages fix security vulnerability
HTML::Entities versions before 3.84 for Perl read freed heap memory in decodeentities. CVE-2026-8829...
Updated perl-Config-IniFiles package fixes a security vulnerability
The updated package fixes a security vulnerability: Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle. CVE-2026-11527...
MGASA-2026-0264 Updated perl-HTML-Parser packages fix security vulnerability
HTML::Entities versions before 3.84 for Perl read freed heap memory in decodeentities. CVE-2026-8829...
MGASA-2026-0263 Updated perl-Config-IniFiles package fixes a security vulnerability
The updated package fixes a security vulnerability: Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle. CVE-2026-11527...
