debian/libapache-session-browseable-perl vulnerabilities

Latest debian/libapache-session-browseable-perl CVEs

Newest publication first

1. CVE-2026-8503 Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids

   Published 2026-05-15

   Medium·CVSS 6.5 EPSS 0.24%

   Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apache::Session::Generate::SHA256 generated session ids insecurely. The default session id generator returns a SHA-256 hash of the built-in rand() function, the epoch time, and the PID,...

2. DLA-3285-1 libapache-session-browseable-perl - security update

   Published 2023-01-28

   Unknown

3. CVE-2020-36659 In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS mo...

   Published 2023-01-27

   High·CVSS 8.1 EPSS 0.45%

   In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. NOTE: this can, for example, be fixed in conjunction with...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.