in reply to Insecure CPAN module in taint mode
Depending on your mail setup, you might want to simply skip that part that invokes the sendmail executable and use a direct SMTP connection:
return $mail->send('smtp');
In your code you don't show how you set $ENV{PATH} to a fixed value - I would start with that...
In Section
Seekers of Perl Wisdom