Tokuhirom Http\
2 CVEs affecting Tokuhirom Http\. Latest disclosed: 2026-02-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-25160 | Medium | 6.5 | 2026-02-27 | HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on s… |
CVE-2026-3255 | Medium | 6.5 | 2026-02-27 | HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand() function. The HTTP::Session2 session id generator returns… |