Gryphon

3 CVEs across 3 Gryphon products. Browse Gryphon vulnerabilities, severities, and proof-of-concept exploits.

Gryphon products with known CVEs

ProductCVEs
Gllcts21
Mojolicious::plugin::captchapng1
Mojolicious::plugin::csrf1
Gryphon CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-40916Critical9.12025-06-16Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha. That version uses the built-in rand() funct…
CVE-2025-40915High7.02025-06-11Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens. That version of the module generates tokens as an MD5 of…
CVE-2008-27462008-06-17SQL injection vulnerability in login.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the detail parameter.