As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-113812: Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates
Mozilla::CA, a Perl module that provides a CA certificate bundle, released version 20261020 on October 20, 2026 to address CVE-2026-113812. The vulnerability involves a root certificate in the bundle that is linked to compromised intermediates, posing a risk to applications relying on this package for certificate validation.
Why it matters: Perl developers and organizations using Mozilla::CA for certificate validation must update to version 20261020 or later to remove the compromised root certificate and prevent potential man-in-the-middle attacks.
- Source published
- First seen by Cybersecurity Tracker