MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor

Last Modified: Sep 08, 2026

Published: Sep 06, 2026

CVE-2026-86219

Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step

Last Modified: Sep 08, 2026

Published: Sep 06, 2026

CVE-2026-82309

Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries

Last Modified: Sep 08, 2026

Published: Sep 04, 2026

CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record

Last Modified: Sep 03, 2026

Published: Sep 01, 2026

CVE-2026-19487

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass

Last Modified: Aug 13, 2026

Published: Aug 13, 2026

Items Per Page