CVE-2026-72888 | Net::OAuth up to 0.31 Smart Require smart_require signature_method memory allocation

August 16, 2026 Yanac

A vulnerability described as problematic has been identified in Net::OAuth up to 0.31. This issue affects the function smart_require of the component Smart Require. Executing a manipulation of the argument signature_method can lead to uncontrolled memory allocation.

This vulnerability is handled as CVE-2026-72888. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More