Skip to content
OpenAdvisories

Vendor

HAARG

4 known vulnerabilities.

Products

HTTP::Tiny 2 Storable 1 Catalyst::Plugin::Session 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-7010

    HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values

    HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values. The unvalidated inputs are the method and URI in the request line, the URL host that becomes the `Host:` header, and HTTP/1.1 control data fie…

    HAARG HTTP::Tiny perl perl Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2025-40924

    Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely

    Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated from a (usually SHA-1) hash of a simple counter, the epoch time, the built-in rand function, the PID and the current Catalyst context. This in…

    HAARG Catalyst::Plugin::Session libcatalyst-plugin-session-perl libcatalyst-plugin-session-perl Debian Ubuntu