perl-Dancer2 vulnerabilities (openSUSE)
4 vulnerabilities.
-
perl-Dancer2openSUSE Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler 7.5 High -
perl-Dancer2openSUSE Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array 6.5 Medium -
perl-Dancer2openSUSE Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks 7.5 High -
perl-Dancer2openSUSE Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler 5.3 Medium