cpan
Security Advisories in cpan
Moderate
over 8 years ago
jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.
cpan
Squatting
Moderate
almost 8 years ago
Prototype Pollution is a vulnerability affecting JavaScript. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. JavaScript allows all Object attributes to be altered, ...
cpan
Zonemaster-GUI
Moderate
about 6 years ago
In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This proble...
cpan
Zonemaster-GUI
Moderate
about 6 years ago
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may exec...
cpan
Zonemaster-GUI
High
over 18 years ago
A tainted cookie could be sent by a malicious user and it would be used in an SQL query without protection against SQL injection.
cpan
Apache-AuthCAS
Moderate
about 7 years ago
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the nat...
cpan
Zonemaster-GUI
Moderate
over 8 years ago
jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for...
cpan
Zonemaster-GUI
Moderate
about 6 years ago
jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be e...
cpan
Zonemaster-GUI
Moderate
over 8 years ago
jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.
cpan
Ukigumo-Server
over 25 years ago
A security bug allowed people to bypass the AllowDownload setting.
cpan
Apache-MP3
Moderate
over 8 years ago
jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.
cpan
Zonemaster-GUI
almost 3 years ago
When not using signed cookies, it was possible to bypass XSRFBlock by POSTing an empty form value and an empty cookie
cpan
Plack-Middleware-XSRFBlock
High
almost 10 years ago
(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/...
cpan
Module-Provision
Critical
almost 7 years ago
libpng before 1.6.32 does not properly check the length of chunks against the user limit.
cpan
Prima-codecs-win32
almost 12 years ago
Outdated LZ4 source code with security issue on 32bit systems.
cpan
Compress-LZ4
High
about 6 years ago
perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input.
cpan
Convert-ASN1
about 1 month ago
Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids. If the communication channel to the statsd daemon is not secured (for example, by sending UDP packets to a host on another network), then users' session ids may be leaked....
cpan
Catalyst-Plugin-Statsd
Moderate
over 9 years ago
The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.
cpan
Win32-File-Summary
about 9 years ago
Timing sidechannel vulnerability in password checking.
cpan
RT-Authen-ExternalAuth
about 12 years ago
X-Real-IP, X-Forwarded-Host and X-Remote-User headers were trusted and used in Kelp::Request
cpan
Kelp
2 months ago
Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id. The generate_session_id function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it generates bytes usi...
cpan
Amon2-Plugin-Web-CSRFDefender
Critical
about 1 year ago
BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities.
cpan
BSON-XS
High
almost 10 years ago
(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/...
cpan
Module-Load-Conditional
Moderate
about 8 years ago
ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_image function which is used to decode halftone segments in a JBIG2 image. A document (PostScript or PDF) with an em...
cpan
Win32-Printer
Filter by Severity
Filter by Package
perl
45
DBD-SQLite
42
MT
37
Mojolicious
18
Dpkg
14
Yukki
14
MySQL-Admin
13
Kossy
11
Zonemaster-GUI
11
YATT-Lite
10
Ukigumo-Server
10
DBI
10
Yancy
10
SockJS
10
Zabbix-Reporter
10
UR
10
App-Netdisco
10
Plack-Debugger
9
Stardust
9
JS-jQuery
9
Resource-Pack-jQuery
9
Yote
9
Sidef
9
Squatting
9
Imager
7
Net-Dropbear
7
DBD-mysql
7
Archive-Tar
6
Cpanel-JSON-XS
6
CGI
6
File-Path
6
libwww-perl
6
Git-Raw
5
Net-CIDR-Lite
5
Win32-File-Summary
5
IO-Compress
5
CryptX
5
ActivePerl
5
Sereal-Decoder
5
YAML-LibYAML
4
Compress-Raw-Zlib
4
Jifty
4
Archive-Unzip-Burst
4
Lemonldap-NG-Portal
4
Net-CIDR-Set
4
Plack
4
CGI-Simple
4
HTTP-Tiny
4
Sereal-Encoder
4
Tk
4
Alien-SVN
4
Git-XS
4
Encode
3
YAML-Syck
3
Apache-Session
3
Net-SNMP
3
XML-LibXML
3
Crypt-CBC
3
Safe
3
Crypt-Sodium-XS
3
Lemonldap-NG-Handler
3
Config-Model
3
mod_perl
3
DBD-Pg
3
SOAP-Lite
3
Dancer
3
DBD-MariaDB
3
Plack-Middleware-Session
3
UI-Dialog
3
Image-ExifTool
3
Lemonldap-NG-Common
3
Crypt-DSA
3
Net-DNS
3
CPAN
3
GBrowse
3
Lemonldap-NG-Manager
3
Perl6-Pugs
3
HTML-Parser
2
HTTP-Session2
2
Boost-Graph
2
Zonemaster-Backend
2
DBIx-Class-EncodedColumn
2
XML-Parser
2
Crypt-OpenSSL-PKCS12
2
Email-Address
2
Mozilla-CA
2
FCGI
2
cppAdaptive1
2
Catalyst-Runtime
2
Perl-Tidy
2
BSON-XS
2
Compress-Raw-Bzip2
2
PathTools
2
Alien-FreeImage
2
HarfBuzz-Shaper
2
MHonArc
2
Spreadsheet-ParseXLSX
2
Digest
2
Archive-Zip
2
Crypt-SaltedHash
2
Apache-Session-Browseable
2
YAML
2
Crypt-Random
2
EasyTCP
2
Locale-Maketext
2
Storable
2
Tcl
2
App-cpanminus
2
Win32-Printer
2
App-revealup
2
POSIX-2008
2
Net-OpenID-Consumer
2
Crypt-NaCl-Sodium
2
IO-Socket-SSL
2
Net-Statsd-Lite
2
HTTP-Daemon
2
cppAdaptive2
2
CGI-Session
2
PAR
2
Crypt-Perl
2
DataDog-DogStatsd
2
Plack-Middleware-Statsd
2
Module-Metadata
1
CBOR-XS
1
Catalyst-Action-REST
1
Crypt-ScryptKDF
1
Amon2-Auth-Site-LINE
1
XML-Atom
1
Net-Xero
1
JavaScript-Duktape
1
IPC-Run
1
CPAN-Checksums
1
JSON-XS
1
Unicode-LineBreak
1
Starman
1
CGI-Application-Plugin-AutoRunmode
1
WWW-UsePerl-Server
1
Apache-Wyrd
1
Net-IP-LPM
1
Net-IPv4Addr
1
Imager-File-GIF
1
Plack-Middleware-XSRFBlock
1
Gazelle
1
Amon2
1
Amon2-Plugin-Web-CSRFDefender
1
RPC-XML
1
eperl
1
Crypt-RandomEncryption
1
Mojo-DOM-Role-Analyzer
1
Mail-Audit
1
Graphics-ColorNames
1
Dancer2
1
Catalyst-Controller-Combine
1
PAR-Packer
1
Devel-StackTrace
1
ExtUtils-MakeMaker
1
Sub-HandlesVia
1
Crypt-SysRandom-XS
1
SVG-Sparkline
1
Apache2-API
1
App-Github-Email
1
XML-Simple
1
Cmd-Dwarf
1
Protocol-HTTP2
1
Search-OpenSearch-Server
1
WWW-Mechanize-Cached
1
Image-Info
1
MARC-File-XML
1
Term-ReadLine-Gnu
1
Otogiri
1
File-Temp
1
Pinto
1
LWP-Protocol-Net-Curl
1
Crypt-Primes
1
String-Compare-ConstantTime
1
Catalyst-Plugin-Session
1
Crypt-OpenSSL-RSA
1
Alien-PCRE2
1
Data-FormValidator
1
Clipboard
1
XML-Twig
1
Text-CSV_XS
1
Redis-Fast
1
Crypt-OpenSSL-DSA
1
Authen-SASL
1
Catalyst-Plugin-Authentication
1
Apache-AuthCAS
1
perl-ldap
1
Apache-SessionX
1
Amazon-Credentials
1
Crypt-PasswdMD5
1
Mojolicious-Plugin-OAuth2
1
Filesys-SmbClientParser
1
WWW-Mechanize
1
Template-Toolkit
1
Web-Passwd
1
PApp
1
CGI-Application-Dispatch
1
Crypt-Random-Source
1
Apache2-AuthAny
1
Filter by Repository
https://github.com/jquery/jquery
108
https://github.com/Perl/perl5
22
https://github.com/sqlite/sqlite
15
https://github.com/mojolicious/mojo
12
https://github.com/twbs/bootstrap
9
https://github.com/perl5-dbi/DBD-mysql
7
https://github.com/rurban/Cpanel-JSON-XS
6
https://github.com/briandfoy/cpan-security-advisory
6
https://github.com/glennrp/libpng
6
https://sourceforge.net/projects/sourceforge.net
6
https://github.com/madler/zlib
6
https://github.com/stigtsp/Net-CIDR-Lite
5
https://github.com/jib/archive-tar-new
5
https://github.com/perl5-dbi/dbi
5
https://github.com/pmqs/IO-Compress
4
https://github.com/facebook/zstd
4
https://github.com/kmx/alien-freeimage
3
https://github.com/cpan-authors/YAML-Syck
3
https://github.com/tonycoz/imager
3
https://github.com/DCIT/perl-CryptX
3
https://github.com/dod38fr/config-model
3
https://github.com/redis/hiredis
3
https://github.com/jquery/jquery-ui
3
https://github.com/libgit2/security
3
https://github.com/libtom/libtomcrypt
3
https://github.com/PerlDancer/Dancer
2
https://github.com/LemonLDAPNG/Apache-Session-Browseable
2
https://github.com/zonemaster/zonemaster-backend
2
https://github.com/ingydotnet/yaml-libyaml-pm
2
https://github.com/miyagawa/cpanminus
2
https://github.com/libwww-perl/HTTP-Daemon
2
https://github.com/svaarala/duktape
2
https://github.com/chartjs/Chart.js
2
https://github.com/robrwo/Plack-Middleware-Statsd
2
https://github.com/libwww-perl/libwww-perl
2
https://github.com/ingydotnet/yaml-pm
2
https://github.com/FGasper/p5-Crypt-Perl
2
https://github.com/cpan-authors/XML-Parser
2
https://github.com/chansen/p5-http-tiny
2
https://github.com/robrwo/perl-Crypt-SaltedHash
2
https://github.com/andk/cpanpm
2
https://github.com/cpan-authors/crypt-nacl-sodium
2
https://github.com/richgel999/miniz
2
https://github.com/tokuhirom/HTTP-Session2
2
https://github.com/hashcat/hashcat
2
https://github.com/AndyA/CGI--Simple
2
https://github.com/libtom/libtommath
2
https://github.com/mitmproxy/pdoc
2
https://github.com/jedisct1/libsodium
2
https://github.com/exiftool/exiftool
2
https://github.com/blog/1938-git-client-vulnerability-announced
2
https://github.com/hatukanezumi/Unicode-LineBreak
1
https://github.com/gitpan/PerlSpeak
1
https://github.com/perl-net-saml2/perl-XML-Sig
1
https://sourceforge.net/projects/net-snmp
1
https://github.com/perl-catalyst/Catalyst-Plugin-Authentication
1
https://github.com/plack/Plack-Middleware-Session
1
https://github.com/robrwo/perl-Mojolicious-Plugin-Statsd
1
https://github.com/cosimo/perl5-net-statsd
1
https://github.com/josdejong/jsoneditor
1
https://github.com/libwww-perl/HTML-Parser
1
https://github.com/houseabsolute/Data-Validate-IP
1
https://github.com/dagolden/Capture-Tiny
1
https://github.com/dajobe/raptor
1
https://github.com/toddr/Crypt-OpenSSL-RSA
1
https://github.com/robrwo/CatalystX-Statsd
1
https://github.com/redhotpenguin/perl-soaplite
1
https://github.com/miyagawa/Starman
1
https://github.com/dankogai/p5-encode
1
https://github.com/wrog/Net-OpenID-Consumer
1
https://github.com/ytnobody/Otogiri
1
https://github.com/cromedome/cgi-application-plugin-captcha
1
https://github.com/preaction/Log-Any
1
https://github.com/richardc/perl-file-find-rule
1
https://github.com/mtrmac/IPTables-Parse
1
https://github.com/hakimel/reveal.js
1
https://github.com/atoomic/Crypt-Random
1
https://github.com/libwww-perl/lwp-protocol-https
1
https://github.com/cpan-authors/XML-LibXML
1
https://github.com/cpan-authors/Text-CSV_XS
1
https://github.com/amaltsev/XAO-Web
1
https://github.com/xsawyerx/app-genpass
1
https://github.com/bluefeet/GitLab-API-v4
1
https://github.com/gbarr/perl-authen-sasl
1
https://github.com/FastCGI-Archives/fcgi2
1
https://github.com/LemonLDAPNG/Apache-Session-LDAP
1
https://github.com/rjbs/Email-MIME
1
https://github.com/dsully/perl-crypt-openssl-pkcs12
1
https://github.com/zhuowei/worthdoingbadly.com
1
https://github.com/kazeburo/Kossy
1
https://github.com/sgnix/kelp
1
https://github.com/certifi/python-certifi
1
https://github.com/kberov/Ado
1
https://github.com/ycdxsb/WindowsPrivilegeEscalation
1
https://github.com/gray/compress-lz4
1
https://github.com/kraih/mojo
1
https://github.com/redhotpenguin/perl-Archive-Zip
1
https://github.com/perl-catalyst/FCGI
1
https://github.com/svarshavchik/Net-CIDR
1
https://github.com/Perl-Toolchain-Gang/ExtUtils-MakeMaker
1
https://github.com/harfbuzz/harfbuzz
1
https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP
1
https://github.com/Leont/crypt-argon2
1
https://github.com/jberger/Galileo
1
https://github.com/pjuhasz/JSON-SIMD
1
https://github.com/faraco/App-Github-Email
1
https://github.com/plack/Plack
1
https://github.com/moment/moment
1
https://github.com/moxiecode/plupload
1
https://github.com/jkeenan/File-Path
1
https://github.com/abw/Template2
1
https://github.com/marcusramberg/Mojolicious-Plugin-OAuth2
1
https://github.com/atrodo/Net-Dropbear
1
https://github.com/Perl-Toolchain-Gang/HTTP-Tiny
1
https://github.com/snapappointments/bootstrap-select
1
https://github.com/robrwo/Net-Statsd-Lite
1
https://github.com/perltidy/perltidy
1
https://github.com/robrwo/Text-Minify-XS
1
https://github.com/markstos/CGI.pm
1
https://github.com/perl-catalyst/Catalyst-Plugin-Session
1
https://github.com/rjbs/Email-Address
1
https://github.com/clintongormley/perl-html-stripscripts
1
https://github.com/robrwo/Net-Statsd-Tiny
1
https://github.com/mkj/dropbear
1
https://github.com/Perl-Toolchain-Gang/File-Temp
1
https://github.com/Dual-Life/Devel-PPPort
1
https://github.com/kazuho/Starlet
1
https://bitbucket.org/shlomif/perl-config-inifiles
1
https://bitbucket.org/xi/libyaml
1
https://github.com/bwva/Concierge-Sessions
1
https://github.com/google/brotli
1
https://github.com/haile01/perl_spreadsheet_excel_rce_poc
1
https://github.com/karpet/Dezi
1
https://github.com/bluefeet/Starch
1
https://github.com/gisle/html-parser
1
https://github.com/angular/angular.js
1
https://github.com/DCIT/perl-Crypt-JWT
1
https://github.com/jmcnamara/spreadsheet-parseexcel
1
https://github.com/perl-Crypt-OpenPGP/Crypt-Random
1
https://github.com/thaljef/Pinto
1
https://github.com/karenetheridge/Crypt-Random-Source
1
https://github.com/tchatzi/Authen-TOTP
1
https://github.com/gbarr/perl-Convert-ASN1
1
https://github.com/Sereal/Sereal
1
https://github.com/seagirl/dwarf
1
https://github.com/creaktive/LWP-Protocol-Net-Curl
1
https://github.com/yuki-kimoto/DBIx-Custom
1
https://github.com/robrwo/perl-Net-CIDR-Set
1
https://github.com/markstos/CGI--Application
1
https://github.com/mojomojo/mojomojo
1
https://github.com/tokuhirom/Amon
1
https://github.com/libwww-perl/WWW-Mechanize-Cached
1
https://github.com/lstein/Lib-Crypt-CBC
1
https://github.com/rschupp/Module-ScanDeps
1
https://github.com/PerlDancer/Dancer2
1
https://github.com/grantm/xml-simple
1
https://github.com/kazeburo/Plack-Middleware-Session-Simple
1
https://github.com/karpet/search-opensearch-server
1
https://github.com/gwadej/svg-sparkline
1
https://github.com/gnustavo/SVN-Look
1
https://github.com/atoomic/Crypt-Primes
1