Dancer Security Advisories - Cpan | Ecosyste.ms: Advisories

Dancer

lightweight yet powerful web application framework

View on github.com · View on metacpan.org

Security Advisories for Dancer in cpan

2 months ago

Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely. The session id is generated from summing the character codepoints of the absolute pathname with the process id, the epoch time and calls to the built-in rand(... CPANSA-Dancer-2026-5080

cpan Dancer

about 12 years ago

CRLF injection vulnerability in the cookie method allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name. CPANSA-Dancer-2014-01

cpan Dancer

over 15 years ago

Directory traversal vulnerability (Mojolicious report, but Dancer was vulnerable as well). CPANSA-Dancer-2011-01

cpan Dancer

Filter by Severity