Karen Etheridge

**Name of the Vulnerable Software and Affected Versions** Catalyst::Plugin::Authentication versions prior to 0.10025 **Description** Catalyst::Plugin::Authentication for Perl is susceptible to timing attacks. The issue arises from the use of Perl's built-in `eq` comparison, where discrepancies in the time taken to perform the comparison could allow an attacker to guess the underlying password or hash. **Recommendations** Update to a version later than 0.10024.