CyberSecBulletin

Nerdvana vulnerabilities

We track 1 vulnerability in Nerdvana products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 13, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Nerdvana vulnerabilities

  • 7.5 High severity

    Crypt::SecretBuffer: Observable Timing Discrepancy

    CVE-2026-5086Nerdvana

    Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in timing could be used to guess the secret password.