CVE-2026-6656

Crypt::Password versions up to 0.28 for Perl are vulnerable to timing attacks due to the use of the eq operator in the check_password method, which can lead to the exposure of hashed passwords. This vulnerability allows attackers to exploit timing discrepancies to infer information about the hash, potentially compromising user credentials. Organizations utilizing this library should prioritize remediation to protect sensitive authentication processes.