cpan Catalyst-Plugin-Static-Simple vulnerabilities

Latest cpan Catalyst-Plugin-Static-Simple CVEs

Newest publication first

1. CVE-2026-15743 Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable

   Published 2026-08-20

   Medium·CVSS 5.7 EPSS 0.41%

   Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The _serve_static method always sets the Cache-Control header to "public", with no means of overriding it. This advises proxies that the content may be stored in a shared cache,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.