CVE-2024-45321: App::cpanminus Project App::cpanminus

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

Affected products

• App::cpanminus Project App::cpanminus: up to and including 1.7047

Published 2024-08-27. Last modified 2026-06-17.