SRI vulnerabilities
4 published CVEs name SRI among the affected products.
- Published CVEs
- 4
- Last 12 months
- 2
- Critical
- 1
- Known exploited
- 0
Critical 1High 1Medium 2Low 0Not scored 0
CVEs per yearBy the year they were published
- 20252
- 20262
Newest CVEs
- CVE-2026-15747
Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle
SRI · Mojolicious
Critical9.1 - CVE-2026-14803
Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder
SRI · Mojo::JSON
Medium6.5 - CVE-2024-58134
Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default
SRI · Mojolicious
High8.1 - CVE-2024-58135
Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default
SRI · Mojolicious
Medium5.3