Skip to content
OpenAdvisories

Product · KTAT

HTTP::Session

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-3256

    HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids

    HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids. HTTP::Session defaults to using HTTP::Session::ID::SHA1 to generate session ids using a SHA-1 hash seeded with the built-in rand function, the high resolution epoc…

    KTAT HTTP::Session