CVE:CVE-2023-31484
CNNVD:CNNVD-202304-2326
Comprehensive Perl Archive Network（Cpan）是一个包含超过 200,000 个 Perl 编程语言模块的存储库。
Comprehensive Perl Archive Network 2.35之前版本存在安全漏洞，该漏洞源于在通过HTTPS下载分发时不会验证TLS证书。
solution:Upgrade cpanpm_project cpanpm to a higher version than 2.35,and avoid the version (,2.35); Upgrade perl perl to a higher version than 5.38.0,and avoid the version (,5.38.0)