Kazeburo vulnerabilities
We track 2 vulnerabilities in Kazeburo products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 6, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Kazeburo vulnerabilities
- 7.5 High severity
Gazelle: Inconsistent Interpretation of HTTP Requests
Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Gazelle incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transf
- 9.8 Critical severity
Plack::Middleware::Session::Simple: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of