libmojolicious-perl vulnerabilities (Debian)
11 vulnerabilities.
-
libmojolicious-perlDebian Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle 9.1 Critical -
libmojolicious-perlDebian Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder 6.5 Medium -
libmojolicious-perlDebian Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default 8.1 High -
libmojolicious-perlDebian Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default 5.3 Medium -
libmojolicious-perlDebian The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be... 4.3 Medium -
libmojolicious-perlDebian The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that... 7.5 High -
libmojolicious-perlDebian The Mojolicious module before 7.66 for Perl may leak cookies in certain situations related to... 5.3 Medium -
libmojolicious-perlDebian Cross-site scripting (XSS) vulnerability in the link_to helper in Mojolicious before 1.12 allows... 4.3 Medium -
libmojolicious-perlDebian Mojolicious before 0.999927 does not properly implement HMAC-MD5 checksums, which has unspecified... 10.0 High -
libmojolicious-perlDebian Commands.pm in Mojolicious before 0.999928 does not properly perform CGI environment detection,... 10.0 High -
libmojolicious-perlDebian Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers... 5.0 Medium