HAARG Catalyst::Plugin::Session vulnerabilities

Latest HAARG Catalyst::Plugin::Session CVEs

Newest publication first

1. CVE-2025-40924 Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely

   Published 2025-07-17

   Medium·CVSS 6.5 EPSS 0.30%

   Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated from a (usually SHA-1) hash of a simple counter, the epoch time, the built-in rand function, the PID and the current Catalyst context. This information is of low e...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.