Security Advisory

CVE-2026-47373

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-20 20:25:49
Last updated 2026-05-21 14:10:59
Assigner CPANSec
CVSS score not scored
State PUBLISHED

Description

Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash.