Vulnerabilities

TI-2013-06215 CVE-2013-10075 · GHSA-c9p5-pwmj-4f88

Apache::Session versions through 1.94 for Perl re-creates deleted sessions

MEDIUM 47

Apache::Session versions through 1.94 for Perl re-creates deleted sessions.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00356 Published 2026-05-08 No fix listed CWE-672

TI-2026-04436 CVE-2026-5081 · GHSA-546v-xqjf-qgcr

MEDIUM 45

Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00302 Published 2026-05-06 No fix listed CWE-340

TI-2025-27322 CVE-2025-40931 · GHSA-32fg-c88m-mcrv

MEDIUM 48

Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00643 Published 2026-03-05 No fix listed CWE-338