CVE-2026-72888

CVE-2026-72888 affects Net::OAuth versions before 0.32 (Perl). The vulnerability arises from unbounded caching in smart_require: results are stored in a process-global hash with no bound or eviction, including entries for names that failed to load. The key is derived server-side from the signatur...