CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
The product does not validate, or incorrectly validates, a certificate.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Cpanpm | Cpanpm_project | * | 2.35 (excluding) |