Debian/libcatalyst-plugin-authentication-perl: high 7.5
Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier. CVE-2026-5091 was fixed in the realm-base
Action: Upgrade libcatalyst-plugin-authentication-perl to 0.10029-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10029-1 | - |
Fixed versions
| 0.10029-1 |
Sources
- osv: DEBIAN-CVE-2026-74846#Debian:14/libcatalyst-plugin-authentication-perl
- https://security-tracker.debian.org/tracker/CVE-2026-74846
published · modified · JSON