SRI

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

SRI records in CISA KEV

No SRI vulnerabilities are listed in CISA KEV.

2 records

TI-2026-13247 CVE-2026-15747 · GHSA-6cg9-7rr8-cvj2

MEDIUM 47

Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0025 Published 2026-07-14 Fixed in 9.48 CWE-204

TI-2026-12479 CVE-2026-14803 · GHSA-fp7f-j7qv-4qww

LOW 29

Mojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoder.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0053 Published 2026-07-06 Fixed in 9.47 CWE-674