Advisories · Technology

KAZEBURO Plack::Middleware::Session::Simple.

Every CVE that names KAZEBURO Plack::Middleware::Session::Simple among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-40926 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely
- KAZEBURO Plack::Middleware::Session::Simple
- Weak cryptography or TLS
- CWE-340
Not analysed yet 5 Mar 2026