Vulnerabilities

TI-2025-27310 CVE-2025-40916 · GHSA-w6w2-2wxg-ggwx

Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text

MEDIUM 46

Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0042 Published 2025-06-16 No fix listed CWE-338

TI-2025-27309 CVE-2025-40915 · GHSA-mqr9-mgqq-52rq

LOW 31

Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00288 Published 2025-06-11 No fix listed CWE-338

TI-2008-02621 CVE-2008-2746 · GHSA-2x8p-q777-q3mr

LOW 35

SQL injection vulnerability in login.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL commands via the detail parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01006 Published 2008-06-17 No fix listed CWE-89