Most recent entries from all

bdu:2024-04335

BREW-abcde-CVE-2020-36829

Affected: Homebrew: abcde

The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected.

EUVD-2026-222673

fkie_cve-2020-36829

The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected.

GHSA-jx7f-v5r5-55j4

The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected.

gsd-2020-36829

OESA-2024-1517 — perl-Mojolicious security update

Affected: openEuler:20.03-LTS-SP1: perl-Mojolicious

Back in the early days of the web there was this wonderful Perl library called CGI, many people only learned Perl because of it. It was simple enough to get started without knowing much about the language and powerful enough to keep you going, learning by doing was much fun. While most of the techniques used are outdated now, the idea behind it is not. Mojolicious is a new attempt at implementing this idea using state of the art technology. Security Fix(es): The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected.(CVE-2020-36829) The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be exploited for denial of service.(CVE-2021-47208)

UBUNTU-CVE-2020-36829

Affected: Ubuntu:16.04:LTS: libmojolicious-perl, Ubuntu:18.04:LTS: libmojolicious-perl, Ubuntu:20.04:LTS: libmojolicious-perl

The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected.