String::Compare::ConstantTime vulnerabilities

1 known vulnerability in String::Compare::ConstantTime from Fractal. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  String::Compare::ConstantTime: Observable Discrepancy

  CVE-2024-13939Mar 28, 2025Fractal

  String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string. As stated in the documentation: "If the lengths of the strings are different, because equals returns false right