VendorsTOKUHIROMhttp%5Call versions
Vulnerabilities

TOKUHIROM HTTP::Session2

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

2CVEs
CVE-2026-3255
HTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() function
Published 2026-02-27 · Analyzed
6.5EPSS 0.005
CVE-2018-25160
HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend
Published 2026-02-27 · Analyzed
6.5EPSS 0.004