BIAFRA
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Dancer2::Plugin::Auth::OAuth | 1 | – | Jun 15, 2026 |
| Dancer2::Plugin::Auth::OAuth::Provider | 1 | – | Jul 4, 2026 |
Exploited and recent CVEs
- CVE-2026-12746 Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter 0.3%
- CVE-2026-11832 Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce 0.3%