Skip to content
Tokuhirom vulnerabilities
Newest
-
tokuhirom image::epeg
Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library
CVE-2026-3031
9.8 Critical
-
tokuhirom amon2::plugin::web::csrfdefender, amon2\ +1 more
Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id
CVE-2026-5082
5.3 Medium
-
tokuhirom amon2
Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions
CVE-2025-15604
9.8 Critical
-
tokuhirom unqlite
UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library
CVE-2026-3257
9.8 Critical
-
tokuhirom http::session2, http\ +1 more
HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend
CVE-2018-25160
6.5 Medium
-
tokuhirom http::session2, http\ +1 more
HTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() function
CVE-2026-3255
6.5 Medium
-
symisc unqlite
symisc UnQLite unqlite.c jx9MemObjStore heap-based overflow
CVE-2025-3791
4.8 Medium