Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

CPAN

cpan

query, download and build perl modules from CPAN sites

View on metacpan.org

Security Advisories for CPAN in cpan

over 3 years ago

The verify_SSL flag is missing from HTTP::Tiny, and allows a network attacker to MITM the connection if it is used by the CPAN client CPANSA-CPAN-2023-31484

cpan CPAN
High
over 4 years ago

CPAN 2.28 allows Signature Verification Bypass. CPANSA-CPAN-2020-16156

cpan CPAN
almost 17 years ago

Archive::Tar preserves permissions in the tarball; extracted file permissions will be set from users umask instead. CPANSA-CPAN-2009-01

cpan CPAN

Filter by Severity

High 1