Skip to content
OpenAdvisories

Vendor

HAYAJO

2 known vulnerabilities.

Products

Mojolicious::Sessions::Storable 1 Mojolicious::Plugin::Web::Auth::OAuth2 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-9733

    Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter

    Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter. When no state generator is specified in the constructor, the module defaults to using a SHA-1 hash of predictable and low-entropy sources, includin…

    HAYAJO Mojolicious::Plugin::Web::Auth::OAuth2