The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-perl-app-cpanminus | Aug 22, 2024 | Dec 13, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-perl-app-cpanminus | Mar 26, 2025 | Dec 13, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Dec 13, 2021 | |
| Debian | debian-upgrade-cpanminus | Jul 30, 2024 | Dec 13, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-perl-app-cpanminus | Apr 26, 2022 | Dec 13, 2021 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Dec 13, 2021 |
| Suse | — | suse-upgrade-perl-app-cpanminus | Mar 8, 2022 | Dec 13, 2021 |
| Ubuntu | ubuntu-pro-upgrade-cpanminus | Mar 22, 2023 | Dec 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub