CVE-2026-9537— Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode() method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies with the number of matching leading bytes. A caller that decodes attacker supplied tokens leaks the expected signature through this timing variation, which can be aggregated over many requests to recover the signature and forge a token.

N/A

通过时间差异性导致的信息暴露

JBERGER Mojo::JWT 侧信道信息泄露漏洞

JBERGER Mojo::JWT是JBERGER个人开发者开源的一款基于 Perl 语言编写的库。 JBERGER Mojo::JWT 1.02之前版本存在侧信道信息泄露漏洞，该漏洞源于HMAC签名验证使用非常数时间字符串比较，decode()方法通过Perl的eq操作符比较签名，比较时间随前缀匹配字节数变化，导致攻击者通过时序变化恢复签名并伪造令牌。

N/A

N/A