Skip to content
OpenAdvisories

Package · Debian

libplack-perl

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2026-115825

    HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length

    HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread() calls sized by the remaining Content-Length. Perl grows the read buffer to the requested…

    libplack-perl Debian
  • Critical 9.1
    CVE-2026-7381

    Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting

    Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the client via the X-Sendfile-Type header, if it is not considered…

    MIYAGAWA Plack::Middleware::XSendfile libplack-perl libplack-perl Debian Ubuntu
  • Unscored —
    CVE-2014-5269

    Plack::App::File in Plack before 1.0031 removes trailing slash characters from paths, which allows remote attackers to …

    libplack-perl Debian