Nixpkgs security tracker
Activity log
- Created suggestion
Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks
Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.
References
Affected products
Catalyst-Plugin-Authentication
- =<0.10024
Matching in nixpkgs
pkgs.perlPackages.CatalystPluginAuthentication
Infrastructure plugin for the Catalyst authentication framework
pkgs.perl5Packages.CatalystPluginAuthentication
Infrastructure plugin for the Catalyst authentication framework