CVE-2026-5091

CVE-2026-5091: Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks

Vendor Jjnapiork

Product Catalyst::Plugin::Authentication

Weakness CWE-208

Published May 21, 2026

Last update May 22, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.

Key dates

02Disclosure timeline

May 21, 2026 CVE published

May 22, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-5091 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/208.html

Related vulnerabilities

04Related CVE

CVE-2025-59058 httpsig-rs's HMAC verification is vulnerable to timing attack CVE-2013-10006 Ziftr primecoin bitcoinrpc.cpp HTTPAuthorized timing discrepancy CVE-2021-31404 Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18 CVE-2024-45052 Fides Webserver Authentication Timing-Based Username Enumeration Vulnerability CVE-2016-15015 viafintech Barzahlen Payment Module PHP SDK Webhook.php verify timing discrepancy