yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2023-31486
Component Overview
Vulnerability Overview
Name
CVE-2023-31486
Source
NVD (
link
)
Debian (
link
)
Description
HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
CWEs
CWE-295
CWE-295
Published Date
Apr 29, 2023
Updated Date
Jun 17, 2026
Workaround
-
Advisories
http://www.openwall.com/lists/oss-security/2023/04/29/1
Mailing List
http://www.openwall.com/lists/oss-security/2023/05/03/3
Mailing List
http://www.openwall.com/lists/oss-security/2023/05/03/5
Mailing List
http://www.openwall.com/lists/oss-security/2023/05/07/2
Mailing List
https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/
Mitigation
https://github.com/chansen/p5-http-tiny/pull/153
Patch
https://hackeriet.github.io/cpan-http-tiny-overview/
Product
https://www.openwall.com/lists/oss-security/2023/04/18/14
Mailing List
https://www.openwall.com/lists/oss-security/2023/05/03/4
Mailing List
https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/
Issue Tracking
http://www.openwall.com/lists/oss-security/2023/04/29/1
Mailing List
http://www.openwall.com/lists/oss-security/2023/05/03/3
Mailing List
http://www.openwall.com/lists/oss-security/2023/05/03/5
Mailing List
http://www.openwall.com/lists/oss-security/2023/05/07/2
Mailing List
https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/
Mitigation
https://github.com/chansen/p5-http-tiny/pull/153
Patch
https://hackeriet.github.io/cpan-http-tiny-overview/
Product
https://www.openwall.com/lists/oss-security/2023/04/18/14
Mailing List
https://www.openwall.com/lists/oss-security/2023/05/03/4
Mailing List
https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/
Issue Tracking
Analysis
#
Affected Component
Analysis
perl
Exploitable
Vulnerability Ratings
#
8.1
CVSSv31
8.1
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
perl
buildroot
2025.02.x
5.40.4
Not Affected
perl
buildroot
master
5.42.2
Not Affected
perl
openwrt
master
5.40.0-r6
Not Affected
perl
openwrt
openwrt-25.12
5.40.0-r6
Not Affected
perl
yocto
master
5.42.2
Not Affected
perl
yocto
scarthgap
5.38.4
Not Affected