| Package | Affected versions | Patched versions |
|---|---|---|
| crypt | < 0.019 | 0.019 |
Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in timing could be used to guess the secret password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free