TI-2026-13201 CVE-2026-15689 · GHSA-gmj3-5xfg-q3qg
Weak password recovery in ABEVERLEY Dancer2::Plugin::Auth::Extensible
Priority MEDIUM 50
Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_reset and _default_welcome_send.