CVE-2026-74846: Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparison

CVE-2026-74846: Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier

Reported by oss-security

Summary by Cyber Security News3 Nov 2026, 20:45 CET

About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/478

Posted by Robert Rothenberg on Nov 03 CVE-2026-74846 CPAN Security Group CVE ID: CVE-2026-74846 Distribution: Catalyst-Plugin-Authentication Versions: before 0.10029 MetaCPAN: https://metacpan.org/dist/Catalyst-Plugin-Authentication ...

Read the full article at oss-security →

Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.