📦 Mojolicious

This vulnerability allows attackers to forge session cookies in Mojolicious web applications by exploiting predictable default HMAC secrets. Attackers who know or guess the secret can tamper with or h...

Mojolicious applications created with 'mojo generate app' from version 7.28 use weak HMAC session cookie secrets generated via Perl's insecure rand() function. This allows attackers to brute-force ses...