Plack

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Plack records in CISA KEV

No Plack vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Plack-middleware-session · all components

TI-2013-06174 CVE-2013-10031 · GHSA-rvh4-4hm5-gx4x

LOW 39

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00291 Published 2025-12-09 Fixed in 0.17 CWE-1254