Security Advisories (1)
CVE-2026-5086 (2026-04-13)

Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in timing could be used to guess the secret password.

Changes for version 0.003 - 2025-05-23

  • Make attribute accessor for stringify_mask Also allows stringify_mask to be specified in the constructor

Documentation

Modules

Prevent accidentally leaking a string of sensitive data
Observe results of a write_async operation

Provides

in lib/Crypt/SecretBuffer.pm