Vulnerabilities in SRI
4 resultsVexday analysis
SRI possui 4 vulnerabilidades conhecidas na base, sendo 1 crítica (CVSS) e nenhuma sob ataque ativo no momento. A fraqueza dominante é informação sensível exposta (CWE-204), com 2 CVEs publicadas nos últimos 90 dias indicando atividade recente de descobertas.
CVE-2024-58135MEDIUMMojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by defaultEPSS 0.5%CVE-2024-58134HIGHMojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by defaultEPSS 0.5%CVE-2026-14803MEDIUMMojo::JSON versions before 9.47 for Perl allow memory exhaustion via unbounded recursion in the pure-Perl decoderEPSS 0.3%CVE-2026-15747CRITICALMojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracleEPSS 0.3%