Miyagawa vulnerabilities
We track 3 vulnerabilities in Miyagawa products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 29, 2026.
Latest Miyagawa vulnerabilities
- 9.1 Critical severity
Plack::Middleware::XSendfile: Exposure of Sensitive Information to an Unauthorized Actor
Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the client via the X-Sendfile-Type header, if it is not considered
- 7.5 High severity
Starman: Inconsistent Interpretation of HTTP Requests
Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Trans
- 7.3 High severity
Plack::Middleware::Session: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, an