Timothy Legge

**Name of the Vulnerable Software and Affected Versions** Punk::Plugin::TOTP versions prior to 0.05 **Description** The software incorrectly validates recovery codes during the two-factor authentication challenge. The `totp use recovery()` function searches the recovery model for a submitted code's digest across all users. The subsequent ownership verification compares the `user id` of the recovery code row with the challenged user's ID using Perl's integer coercion. If identifiers do not start with digits (such as usernames, email addresses, or UUIDs), they are coerced to zero, causing the comparison to evaluate as equal regardless of the actual user. This allows an attacker who possesses a valid password and their own recovery code to bypass the second factor of a victim's account. **Recommendations** Update to version 0.05 or later.

**Name of the Vulnerable Software and Affected Versions** Perl versions prior to 5.43.11 **Description** A heap buffer overflow occurs on 32-bit builds when compiling regular expressions containing a repeated fixed string. The issue resides in the `Perl study chunk()` function within `regcomp study.c`, which validates the size of the joined substring buffer using characters instead of bytes. When a quantified fixed substring has a large minimum count, the byte length calculation `mincount * l` can overflow `SSize t`, resulting in an undersized `SvGROW` allocation. This causes subsequent copy operations to write past the end of the buffer. An attacker can trigger this condition by providing a specially crafted regular expression for compilation. **Recommendations** Update to version 5.43.11 or later.

**Name of the Vulnerable Software and Affected Versions** Crypt::NaCl::Sodium versions through 2.001 **Description** The software contains an integer overflow flaw on 32-bit systems. Specifically, the Sodium.xs component casts a `STRLEN` (size t) to an unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems, `size t` is typically 32-bits, while an unsigned long long is at least 64-bits. **Recommendations** Update to a version of Crypt::NaCl::Sodium later than 2.001.