CPAN Security Advisory

Security Notices
CPANSec Discloses Legacy HTTP::Session Memcached Command InjectionNew!!
11/14/2026

CPANSec discloses legacy HTTP::Session memcached injection. Check the store backend, address vulnerable versions, and plan migration from deprecated code.

Read this guide
Security Notices
CPANSec Discloses Seven JSON::XS Flaws Fixed in 4.05New!!
11/14/2026

CPANSec discloses seven JSON::XS flaws fixed in 4.05. Update affected Perl services, validate parsing and encoding, and retain deployment evidence.

Read this guide