The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.Referenceshttps://metacpan.org/pod/CPAN::Checksumshttps://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
