CVE-2023-31484

CVE-2023-31484 affects CPAN.pm (and CPAN::HTTP::Client) prior to version 2.35, where TLS certificates were not verified when downloading distributions over HTTPS, enabling potential MITM. Public advisories across Debian, AlmaLinux, Amazon Linux, and Cloud Foundry confirm this issue and its fix: C...