CVE-2020-16156

CPAN 2.28 allows Signature Verification Bypass.