MIYAGAWA vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 20263

Newest CVEs

• CVE-2026-7381

  Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting

  MIYAGAWA · Plack::Middleware::XSendfile

  Critical9.1
• CVE-2026-40560

  Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence

  MIYAGAWA · Starman

  High7.5
• CVE-2014-125112

  Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution

  MIYAGAWA · Plack::Middleware::Session::Cookie

  Critical9.8
• CVE-2013-10031

  Plack::Middleware::Session versions before 0.17 for Perl may be vulnerable to HMAC comparison timing attacks

  MIYAGAWA · Plack::Middleware::Session

  High7.5
• CVE-2025-40923

  Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely

  MIYAGAWA · Plack::Middleware::Session

  High7.3