TOKUHIROM

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

TOKUHIROM records in CISA KEV

No TOKUHIROM vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Http 2 records LOW Amon2 1 record MEDIUM Amon2 1 record LOW Unqlite 1 record MEDIUM

Records

2 records in Http · all components

TI-2026-02810 CVE-2026-3255 · GHSA-2p7f-7xjf-8q9q

HTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() function

LOW 35

HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand() function.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00461 Published 2026-02-27 Fixed in 1.12 CWE-338

TI-2018-15385 CVE-2018-25160 · GHSA-hg4g-pqvm-c557

Improper input validation in TOKUHIROM HTTP::Session2

LOW 35

HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00446 Published 2026-02-27 No fix listed CWE-20

Open these records in search →

Critical	3
High	0
Medium	3
Low	0
No CVSS	0