Fractal vulnerabilities
We track 1 vulnerability in Fractal products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 28, 2025.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Fractal vulnerabilities
- 7.5 High severity
String::Compare::ConstantTime: Observable Discrepancy
String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string. As stated in the documentation: "If the lengths of the strings are different, because equals returns false right