| Package | Affected versions | Patched versions |
|---|---|---|
| module | = 0.70= 0.71≤ 0.72 |
The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special unknown cipher" that references an untrusted module in Digest/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free