Open Source Security mailing list@oss_security
Disclosure
Perl CPAN CVE-2026-46473: Authen::TOTP before 0.1.1 generate secrets using rand https://www.openwall.com/lists/oss-security/2026/05/21/15 CVE-2026-5091: Catalyst::Plugin::Authentication through 0.10024 is susceptible to timing attacks https://www.openwall.com/lists/oss-security/2026/05/21/19
Post summary
Two Perl CPAN modules have been disclosed as vulnerable: Authen::TOTP uses insecure random number generation for secret creation, and Catalyst::Plugin::Authentication is susceptible to timing attacks.
00000190
4.6K followersView on X