= 2.12
The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.