The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl-app-cpanminus | Aug 22, 2024 | Dec 13, 2021 |
| Amazon Linux Ami 2 | — | Upgrade perl-App-cpanminus | Mar 26, 2025 | Dec 13, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 13, 2021 |
| Debian | — | Upgrade cpanminus | Jul 30, 2024 | Dec 13, 2021 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 26, 2022 | Dec 13, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 13, 2021 |
| Suse | — | Upgrade perl-App-cpanminus | Mar 8, 2022 | Dec 13, 2021 |
| Ubuntu | — | Upgrade cpanminus (Ubuntu Pro) | Mar 22, 2023 | Dec 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub