Skip to content
OpenAdvisories

Vendor

SRI

4 known vulnerabilities.

Products

Mojolicious 3 Mojo::JSON 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-14803

    Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder

    Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder. The pure-Perl decode path (`_decode_value` dispatching to `_decode_array` and `_decode_object`) recurses with no depth limit, so a small deeply …

    SRI Mojo::JSON libmojolicious-perl libmojolicious-perl Debian Ubuntu
  • Medium 5.3
    CVE-2024-58135

    Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default

    Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default. When creating a default app skeleton with the "mojo generate app" tool, a weak secret is written to the application's confi…

    SRI Mojolicious libmojolicious-perl libmojolicious-perl Debian Ubuntu