Miyagawa

5 CVEs across 7 Miyagawa products. Browse Miyagawa vulnerabilities, severities, and proof-of-concept exploits.

Miyagawa products with known CVEs

ProductCVEs
Plack\2
Plack::middleware::session2
Plack::middleware::session::cookie1
Plack\:\:middleware\:\:session\:\:cookie1
Plack::middleware::xsendfile1
Plack\:\:middleware\:\:xsendfile1
Starman1
Miyagawa CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-7381Critical9.12026-04-29Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation se…
CVE-2026-40560High7.52026-04-29Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "T…
CVE-2014-125112Critical9.82026-03-26Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a…
CVE-2013-10031High7.52025-12-09Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks
CVE-2025-40923High7.32025-07-16Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the…