It’s Time to Retire Your @cpan.org Email Address
Please remove uses of the @cpan.org email forwarding service where you can conveniently do so, as this makes it easier to contact you about security issues i...
CPANSec Blog Posts
Security Considerations for Statsd Clients
There is no official specification or request for comments… A side-effect is that the security is often overlooked.
Is it time to update your contact information?
The end of cpan.org email forwarding
CPANSec: 2025 Year in Review
CPANSec year 2025 in review: Website updates, CVEs published, conference talks held, security modules written and guidelines published.
Are you still using the 2-argument open?
The 2-argument open function is insecure
CPANSec retrospective 2024
Here is the CPANSec 2024 Retrospective
Add a security policy to your distributions
Adding a SECURITY or SECURITY.md file to your Perl distributions will let people know how to contact the maintainers if they find a security issue with your ...
CPAN Author’s Guide to Random Data for Security
Any secret token that allows someone to access a resource or perform an action should be generated with a secure random number generator…
Please keep your information up-to-date
Some end of year reminders for CPAN Authors: Do all of your modules have up-to-date contact information?