Tokuhirom Http::session2 vulnerabilities
- tokuhirom http::session2, http\ +1 more HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend 6.5 Medium
- tokuhirom http::session2, http\ +1 more HTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() function 6.5 Medium