Advisories · Technology
MIYAGAWA Plack::Middleware::Session.
Every CVE that names MIYAGAWA Plack::Middleware::Session among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Plack::Middleware::Session versions before 0.17 for Perl may be vulnerable to HMAC comparison timing attacks
- MIYAGAWA Plack::Middleware::Session
- CWE-1254
- CVSS 7.3 High
Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely
- MIYAGAWA Plack::Middleware::Session
- Weak cryptography or TLS
- CWE-340