The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16154
Reference (s):
- FEDORA:FEDORA-2022-f4b7f896e3
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DENFY4CRTIZL5WYYUYUM4VKCJNXO4QIW/
- https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
- https://metacpan.org/pod/App::cpanminus