oss-security·2d agoCVE-2026-85491: Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on the request path alone#perl#catalyst#authorization-bypassCVE-2026-85491 2 sources