You know, I should really start making a list of quick security fixes for people.
$ ack -al '(?<!#)\s*use.+CGI::Carp\s.*fatalsToBrowser' | wc -l
Or to make it even easier (with typo fix from smylers)
$ vim $(ack -al '(?<!#)\s*use.+CGI::Carp\s.*fatalsToBrowser')
You could also do that with perl -pi.bak, but I don't care to automate fixing security issues. You want to look at those directly The above, for example, won't recognize POD. Of course, it also won't recognize CGI::Carp->import('fatalsToBrowser').