TI-2020-12707 CVE-2020-16156 · GHSA-mx9v-6qg3-92rpCPAN 2.28 allows Signature Verification Bypass.Priority LOW 36CPAN 2.28 allows Signature Verification Bypass.CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00858 · Published 2021-12-13 · Partial fix CWE-347