Vulnerabilities

Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library.

Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id.

Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions.

UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library.

HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend.

HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand() function.