libdancer2-perl vulnerabilities (Ubuntu)
5 vulnerabilities.
-
libdancer2-perlUbuntu Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler 7.5 High -
libdancer2-perlUbuntu Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array 6.5 Medium -
libdancer2-perlUbuntu Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks 7.5 High -
libdancer2-perlUbuntu Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler 5.3 Medium -
libdancer2-perlUbuntu Dancer2 versions before 2.2.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable 8.2 High