ABEVERLEY Dancer2::Plugin::Auth::Extensible

• CVE-2026-15689 Critical 9.8 Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_reset and _default_welcome_send 0.6%