Skip to content
OpenAdvisories

Vendor

SRI

4 known vulnerabilities.

Products

Mojolicious 3 Mojo::JSON 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-15747

    Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle

    Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle. _csrf_token generates and caches one token per session and returns the same value on every call, and _csrf_field place…

    SRI Mojolicious libmojolicious-perl libmojolicious-perl Debian Ubuntu Azure Linux