Crypt::SecretBuffer vulnerabilities

1 known vulnerability in Crypt::SecretBuffer from Nerdvana. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Crypt::SecretBuffer: Observable Timing Discrepancy

  CVE-2026-5086Apr 13, 2026Nerdvana

  Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in timing could be used to guess the secret password.