Miyagawa Plack::middleware::session
2 CVEs affecting Miyagawa Plack::middleware::session. Latest disclosed: 2025-12-09. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2013-10031 | High | 7.5 | 2025-12-09 | Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks |
CVE-2025-40923 | High | 7.3 | 2025-07-16 | Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the… |