CVE-2026-5091CWE-208

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks

Medium · published May 21, 2026

CVSS v3.1
5.1
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks.

These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Weakness
CWE-208 · Observable Timing Discrepancy
Published
2026-05-21T21:07Z
EPSS history
Timeline
  • 21 MAY 21:07Z
    Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks
    cvelistv5