Plack::Middleware::Session::Simple vulnerabilities

1 known vulnerability in Plack::Middleware::Session::Simple from Kazeburo. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Plack::Middleware::Session::Simple: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2025-40926Mar 5, 2026Kazeburo

  Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of