Mojolicious vulnerabilities

Products

• Mojolicious 10

Newest

• mojolicious Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default CVE-2024-58134 8.1 HighMay 3, 2025
• mojolicious Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default CVE-2024-58135 5.3 MediumMay 3, 2025
• mojolicious The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be... CVE-2021-47208 Fix available 4.3 MediumApril 7, 2024
• mojolicious The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that... CVE-2020-36829 Fix available 7.5 HighApril 7, 2024
• mojolicious The Mojolicious module before 7.66 for Perl may leak cookies in certain situations related to... CVE-2018-25100 Fix available 5.3 MediumMarch 24, 2024
• mojolicious Cross-site scripting (XSS) vulnerability in the link_to helper in Mojolicious before 1.12 allows... CVE-2011-1841 Fix available 4.3 MediumMay 3, 2011
• mojolicious Mojolicious before 0.999927 does not properly implement HMAC-MD5 checksums, which has unspecified... CVE-2010-4803 Fix available 10.0 HighMay 3, 2011
• mojolicious Commands.pm in Mojolicious before 0.999928 does not properly perform CGI environment detection,... CVE-2010-4802 Fix available 10.0 HighMay 3, 2011
• mojolicious Unspecified vulnerability in the MojoX::Dispatcher::Static implementation in Mojolicious before 0... CVE-2009-5074 10.0 HighMay 3, 2011
• mojolicious Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers... CVE-2011-1589 Fix available 5.0 MediumApril 19, 2011