Mojolicious 3.24 Deleted
Security Advisories
Mojo::DOM did not correctly parse <script> tags.
- https://github.com/mojolicious/mojo/commit/6f195d85db6756022d3599f7d2634975688c9550
- https://github.com/mojolicious/mojo/issues/2014
- https://github.com/mojolicious/mojo/issues/2015
Fixed version: >=9.31
Reported: 2022-12-10
Small sessions could be used as part of a brute-force attack to decode the session secret.
Reported: 2021-06-01
CVE-2021-47208
A bug in format detection can potentially be exploited for a DoS attack.
- https://github.com/mojolicious/mojo/issues/1736
- https://github.com/mojolicious/mojo/commit/a0c4576ffb11c235088550de9ba7ac4196e1953c
Reported: 2021-03-16
CVE-2020-36829
Mojo::Util secure_compare can leak the string length. By immediately returning when the two strings are not the same length, the function allows an attacker to guess the length of the secret string using timing attacks.
Reported: 2020-11-10
Mojo::UserAgent was not checking peer SSL certificates by default.
- https://github.com/mojolicious/mojo/pull/1226
- https://github.com/mojolicious/mojo/commit/d3cbbad890673612fdbdea63fdd522b516f6104c
Severity: high
Reported: 2018-05-19
GET requests with embedded backslashes can be used to access local files on Windows hosts
- https://github.com/mojolicious/mojo/pull/1217
- https://github.com/mojolicious/mojo/commit/23ebe051d9378f0f122e3c908845fc0c2cae0106
Severity: critical
Reported: 2018-05-11
CVE-2018-25100
Mojo::UserAgent::CookieJar leaks old cookies because of the missing host_only flag on empty domain.
- https://github.com/mojolicious/mojo/pull/1192
- https://github.com/mojolicious/mojo/issues/1185
- https://github.com/mojolicious/mojo/commit/c16a56a9d6575ddc53d15e76d58f0ebcb0eeb149
Severity: minor
Reported: 2018-02-13
Directory traversal on Windows
- https://github.com/mojolicious/mojo/issues/738
- https://github.com/mojolicious/mojo/commit/9ffa38fca73a9ddee91cbc70e0696268d500edde
Severity: critical
Reported: 2015-02-02
Context sensitivity of method param could lead to parameter injection attacks.
Severity: high
Reported: 2014-10-07
Kwalitee Issues
- no_mymeta_files
-
Update MANIFEST.SKIP to exclude MYMETA files. If you are lazy, add "#!install_default" in your MANIFEST.SKIP and update your ExtUtils::Manifest if necessary, then some of the most common files will be excluded.
- use_strict
-
Add 'use strict' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules are strictly written.
Error: Mojo::HelloWorld
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Mojo::HelloWorld
- meta_yml_has_provides
-
Add all modules contained in this distribution to the META.yml field 'provides'. Module::Build or Dist::Zilla::Plugin::MetaProvides do this automatically for you.
Modules
Name | Abstract | Version | View |
---|---|---|---|
Mojo | Duct tape for the HTML5 web! | metacpan | |
Mojo::Asset | HTTP content storage base class | metacpan | |
Mojo::Asset::File | File storage for HTTP content | metacpan | |
Mojo::Asset::Memory | In-memory storage for HTTP content | metacpan | |
Mojo::Base | Minimal base class for Mojo projects | metacpan | |
Mojo::ByteStream | ByteStream | metacpan | |
Mojo::Cache | Naive in-memory cache | metacpan | |
Mojo::Collection | Collection | metacpan | |
Mojo::Content | HTTP content base class | metacpan | |
Mojo::Content::MultiPart | HTTP multipart content | metacpan | |
Mojo::Content::Single | HTTP content | metacpan | |
Mojo::Cookie | HTTP cookie base class | metacpan | |
Mojo::Cookie::Request | HTTP request cookie | metacpan | |
Mojo::Cookie::Response | HTTP response cookie | metacpan | |
Mojo::DOM | Minimalistic HTML5/XML DOM parser with CSS3 selectors | metacpan | |
Mojo::DOM::CSS | CSS3 selector engine | metacpan | |
Mojo::DOM::HTML | HTML5/XML engine | metacpan | |
Mojo::Date | HTTP date | metacpan | |
Mojo::EventEmitter | Event emitter base class | metacpan | |
Mojo::Exception | Exceptions with context | metacpan | |
Mojo::Headers | Headers | metacpan | |
Mojo::HelloWorld | Hello World! | metacpan | |
Mojo::Home | Home sweet home! | metacpan | |
Mojo::IOLoop | Minimalistic reactor for non-blocking TCP clients and servers | metacpan | |
Mojo::IOLoop::Client | Non-blocking TCP client | metacpan | |
Mojo::IOLoop::Delay | Synchronize events | metacpan | |
Mojo::IOLoop::Server | Non-blocking TCP server | metacpan | |
Mojo::IOLoop::Stream | Non-blocking I/O stream | metacpan | |
Mojo::JSON | Minimalistic JSON | metacpan | |
Mojo::JSON::Pointer | JSON Pointers | metacpan | |
Mojo::Loader | Loader | metacpan | |
Mojo::Log | Simple logger | metacpan | |
Mojo::Message | HTTP message base class | metacpan | |
Mojo::Message::Request | HTTP request | metacpan | |
Mojo::Message::Response | HTTP response | metacpan | |
Mojo::Parameters | Parameters | metacpan | |
Mojo::Path | Path | metacpan | |
Mojo::Reactor | Low level event reactor base class | metacpan | |
Mojo::Reactor::EV | Low level event reactor with libev support | metacpan | |
Mojo::Reactor::Poll | Low level event reactor with poll support | metacpan | |
Mojo::Server | HTTP server base class | metacpan | |
Mojo::Server::CGI | CGI server | metacpan | |
Mojo::Server::Daemon | Non-blocking I/O HTTP and WebSocket server | metacpan | |
Mojo::Server::Hypnotoad | ALL GLORY TO THE HYPNOTOAD! | metacpan | |
Mojo::Server::Morbo | DOOOOOOOOOOOOOOOOOOM! | metacpan | |
Mojo::Server::PSGI | PSGI server | metacpan | |
Mojo::Template | Perl-ish templates! | metacpan | |
Mojo::Transaction | Transaction base class | metacpan | |
Mojo::Transaction::HTTP | HTTP transaction | metacpan | |
Mojo::Transaction::WebSocket | WebSocket transaction | metacpan | |
Mojo::URL | Uniform Resource Locator | metacpan | |
Mojo::Upload | Upload | metacpan | |
Mojo::UserAgent | Non-blocking I/O HTTP and WebSocket user agent | metacpan | |
Mojo::UserAgent::CookieJar | Cookie jar for HTTP user agents | metacpan | |
Mojo::UserAgent::Transactor | User agent transactor | metacpan | |
Mojo::Util | Portable utility functions | metacpan | |
Mojolicious | Real-time web framework | 3.24 | metacpan |
Mojolicious::Command | Command base class | metacpan | |
Mojolicious::Command::cgi | CGI command | metacpan | |
Mojolicious::Command::cpanify | Cpanify command | metacpan | |
Mojolicious::Command::daemon | Daemon command | metacpan | |
Mojolicious::Command::eval | Eval command | metacpan | |
Mojolicious::Command::generate | Generator command | metacpan | |
Mojolicious::Command::generate::app | App generator command | metacpan | |
Mojolicious::Command::generate::lite_app | Lite app generator command | metacpan | |
Mojolicious::Command::generate::makefile | Makefile generator command | metacpan | |
Mojolicious::Command::generate::plugin | Plugin generator command | metacpan | |
Mojolicious::Command::get | Get command | metacpan | |
Mojolicious::Command::inflate | Inflate command | metacpan | |
Mojolicious::Command::psgi | PSGI command | metacpan | |
Mojolicious::Command::routes | Routes command | metacpan | |
Mojolicious::Command::test | Test command | metacpan | |
Mojolicious::Command::version | Version command | metacpan | |
Mojolicious::Commands | Command line interface | metacpan | |
Mojolicious::Controller | Controller base class | metacpan | |
Mojolicious::Lite | Real-time micro web framework | metacpan | |
Mojolicious::Plugin | Plugin base class | metacpan | |
Mojolicious::Plugin::Charset | Charset plugin | metacpan | |
Mojolicious::Plugin::Config | Perl-ish configuration plugin | metacpan | |
Mojolicious::Plugin::DefaultHelpers | Default helpers plugin | metacpan | |
Mojolicious::Plugin::EPLRenderer | Embedded Perl Lite renderer plugin | metacpan | |
Mojolicious::Plugin::EPRenderer | Embedded Perl renderer plugin | metacpan | |
Mojolicious::Plugin::HeaderCondition | Header condition plugin | metacpan | |
Mojolicious::Plugin::JSONConfig | JSON configuration plugin | metacpan | |
Mojolicious::Plugin::Mount | Application mount plugin | metacpan | |
Mojolicious::Plugin::PODRenderer | POD renderer plugin | metacpan | |
Mojolicious::Plugin::PoweredBy | Powered by plugin | metacpan | |
Mojolicious::Plugin::RequestTimer | Request timer plugin | metacpan | |
Mojolicious::Plugin::TagHelpers | Tag helpers plugin | metacpan | |
Mojolicious::Plugins | Plugin manager | metacpan | |
Mojolicious::Renderer | MIME type based renderer | metacpan | |
Mojolicious::Routes | Always find your destination with routes! | metacpan | |
Mojolicious::Routes::Match | Routes visitor | metacpan | |
Mojolicious::Routes::Pattern | Routes pattern engine | metacpan | |
Mojolicious::Routes::Route | Route | metacpan | |
Mojolicious::Sessions | Signed cookie based sessions | metacpan | |
Mojolicious::Static | Serve static files | metacpan | |
Mojolicious::Types | MIME types | metacpan | |
Test::Mojo | Testing Mojo! | metacpan | |
ojo | Fun oneliners with Mojo! | metacpan |