CVE-2024-13939

The String::Compare::ConstantTime Perl module, specifically versions through 0.321 , is vulnerable to a timing attack within its equals function. Because the function returns false immediately when string lengths differ, an attacker can observe the time difference to guess the length of a secret ...