Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Punk-TOTP

cpan

HOTP and TOTP one-time passwords

View on metacpan.org

Security Advisories for Punk-TOTP in cpan

Critical
6 days ago

Punk::Plugin::TOTP versions before 0.05 for Perl allow the second-factor attempt limit to be reset by replaying an earlier session cookie because the challenge route counts failures in the session. CPANSA-Punk-TOTP-2026-78655

cpan Punk-TOTP
Critical
6 days ago

Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically. CPANSA-Punk-TOTP-2026-78619

cpan Punk-TOTP

Filter by Severity

Critical 2