App::Cpanminus Security Vulnerabilities - February

CVE-2020-16154

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.

CVE-2024-45321

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.