Plack vulnerabilities

1 known vulnerability in Plack from Miyagawa. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Plack::Middleware::XSendfile: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-7381Apr 29, 2026Miyagawa

  Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the client via the X-Sendfile-Type header, if it is not considered