CyberSecBulletin

Fractal vulnerabilities

We track 1 vulnerability in Fractal products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 28, 2025.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Fractal vulnerabilities

  • 7.5 High severity

    String::Compare::ConstantTime: Observable Discrepancy

    CVE-2024-13939Fractal

    String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string. As stated in the documentation: "If the lengths of the strings are different, because equals returns false right