CVE-2026-78619: Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically

<p>Posted by Timothy Legge on Aug 25</p>========================================================================<br /> CVE-2026-78619 CPAN Security Group<br /> ========================================================================<br /> <br /> CVE ID: CVE-2026-78619<br /> Distribution: Punk-TOTP<br /> Versions: before 0.05<br /> <br />