TOKUHIROM vulnerabilities

Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library

TOKUHIROM · Image::EPEG

Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id

TOKUHIROM · Amon2::Plugin::Web::CSRFDefender

Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions

TOKUHIROM · Amon2

UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library

TOKUHIROM · UnQLite

HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend

TOKUHIROM · HTTP::Session2

HTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() function

TOKUHIROM · HTTP::Session2