Advisories · Technology

FRACTAL String::Compare::ConstantTime.

Every CVE that names FRACTAL String::Compare::ConstantTime among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-13939 CVE record

CVSS 7.5 High

String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string
- FRACTAL String::Compare::ConstantTime
- CWE-208
Not analysed yet 28 Mar 2025