What’s Vulnerable › Products

TOKUHIROM Http::Session2 vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your TOKUHIROM Http::Session2 version is affected

Latest TOKUHIROM Http::Session2 vulnerabilities

• CVE-2018-25160 — HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend (CVSS 6.5)
• CVE-2026-3255 — HTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() function (CVSS 6.5)