/ 
Crypt-SecretBuffer-0.005
Security Advisories (1)
CVE-2026-5086 (2026-04-13)

Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in timing could be used to guess the secret password.

Changes for version 0.005 - 2025-06-05

  • Fix bug in index() that fails to search on final char of buffer
  • Improved OS feature detection, which should fix many build failures
  • Fix 5.8 compat
  • More unit tests
  • Document security policy

Documentation

README.md
SECURITY.md

Modules

Crypt::SecretBuffer
Prevent accidentally leaking a string of sensitive data
Crypt::SecretBuffer::AsyncResult
Observe results of a write_async operation

Provides

Crypt::SecretBuffer::Exports
in lib/Crypt/SecretBuffer.pm

Other files