Mojolicious 6.19 Deleted
Security Advisories
Mojo::DOM did not correctly parse <script> tags.
- https://github.com/mojolicious/mojo/commit/6f195d85db6756022d3599f7d2634975688c9550
- https://github.com/mojolicious/mojo/issues/2014
- https://github.com/mojolicious/mojo/issues/2015
Fixed version: >=9.31
Reported: 2022-12-10
Small sessions could be used as part of a brute-force attack to decode the session secret.
Reported: 2021-06-01
CVE-2021-47208
A bug in format detection can potentially be exploited for a DoS attack.
- https://github.com/mojolicious/mojo/issues/1736
- https://github.com/mojolicious/mojo/commit/a0c4576ffb11c235088550de9ba7ac4196e1953c
Reported: 2021-03-16
CVE-2020-36829
Mojo::Util secure_compare can leak the string length. By immediately returning when the two strings are not the same length, the function allows an attacker to guess the length of the secret string using timing attacks.
Reported: 2020-11-10
Mojo::UserAgent was not checking peer SSL certificates by default.
- https://github.com/mojolicious/mojo/pull/1226
- https://github.com/mojolicious/mojo/commit/d3cbbad890673612fdbdea63fdd522b516f6104c
Severity: high
Reported: 2018-05-19
GET requests with embedded backslashes can be used to access local files on Windows hosts
- https://github.com/mojolicious/mojo/pull/1217
- https://github.com/mojolicious/mojo/commit/23ebe051d9378f0f122e3c908845fc0c2cae0106
Severity: critical
Reported: 2018-05-11
CVE-2018-25100
Mojo::UserAgent::CookieJar leaks old cookies because of the missing host_only flag on empty domain.
- https://github.com/mojolicious/mojo/pull/1192
- https://github.com/mojolicious/mojo/issues/1185
- https://github.com/mojolicious/mojo/commit/c16a56a9d6575ddc53d15e76d58f0ebcb0eeb149
Severity: minor
Reported: 2018-02-13
Kwalitee Issues
- use_strict
-
Add 'use strict' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules are strictly written.
Error: Mojo::HelloWorld
- prereq_matches_use
-
List all used modules in META.yml requires
Error:
- EV
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Mojo::HelloWorld
- meta_yml_has_provides
-
Add all modules contained in this distribution to the META.yml field 'provides'. Module::Build or Dist::Zilla::Plugin::MetaProvides do this automatically for you.
Modules
Name | Abstract | Version | View |
---|---|---|---|
Mojo | Duct tape for the HTML5 web! | metacpan | |
Mojo::Asset | HTTP content storage base class | metacpan | |
Mojo::Asset::File | File storage for HTTP content | metacpan | |
Mojo::Asset::Memory | In-memory storage for HTTP content | metacpan | |
Mojo::Base | Minimal base class for Mojo projects | metacpan | |
Mojo::ByteStream | ByteStream | metacpan | |
Mojo::Cache | Naive in-memory cache | metacpan | |
Mojo::Collection | Collection | metacpan | |
Mojo::Content | HTTP content base class | metacpan | |
Mojo::Content::MultiPart | HTTP multipart content | metacpan | |
Mojo::Content::Single | HTTP content | metacpan | |
Mojo::Cookie | HTTP cookie base class | metacpan | |
Mojo::Cookie::Request | HTTP request cookie | metacpan | |
Mojo::Cookie::Response | HTTP response cookie | metacpan | |
Mojo::DOM | Minimalistic HTML/XML DOM parser with CSS selectors | metacpan | |
Mojo::DOM::CSS | CSS selector engine | metacpan | |
Mojo::DOM::HTML | HTML/XML engine | metacpan | |
Mojo::Date | HTTP date | metacpan | |
Mojo::EventEmitter | Event emitter base class | metacpan | |
Mojo::Exception | Exceptions with context | metacpan | |
Mojo::Headers | Headers | metacpan | |
Mojo::HelloWorld | Hello World! | metacpan | |
Mojo::Home | Home sweet home! | metacpan | |
Mojo::IOLoop | Minimalistic event loop | metacpan | |
Mojo::IOLoop::Client | Non-blocking TCP client | metacpan | |
Mojo::IOLoop::Delay | Manage callbacks and control the flow of events | metacpan | |
Mojo::IOLoop::Server | Non-blocking TCP server | metacpan | |
Mojo::IOLoop::Stream | Non-blocking I/O stream | metacpan | |
Mojo::JSON | Minimalistic JSON | metacpan | |
Mojo::JSON::Pointer | JSON Pointers | metacpan | |
Mojo::Loader | Loader | metacpan | |
Mojo::Log | Simple logger | metacpan | |
Mojo::Message | HTTP message base class | metacpan | |
Mojo::Message::Request | HTTP request | metacpan | |
Mojo::Message::Response | HTTP response | metacpan | |
Mojo::Parameters | Parameters | metacpan | |
Mojo::Path | Path | metacpan | |
Mojo::Reactor | Low-level event reactor base class | metacpan | |
Mojo::Reactor::EV | Low-level event reactor with libev support | metacpan | |
Mojo::Reactor::Poll | Low-level event reactor with poll support | metacpan | |
Mojo::Server | HTTP/WebSocket server base class | metacpan | |
Mojo::Server::CGI | CGI server | metacpan | |
Mojo::Server::Daemon | Non-blocking I/O HTTP and WebSocket server | metacpan | |
Mojo::Server::Hypnotoad | ALL GLORY TO THE HYPNOTOAD! | metacpan | |
Mojo::Server::Morbo | DOOOOOOOOOOOOOOOOOOM! | metacpan | |
Mojo::Server::PSGI | PSGI server | metacpan | |
Mojo::Server::Prefork | Preforking non-blocking I/O HTTP and WebSocket server | metacpan | |
Mojo::Template | Perl-ish templates! | metacpan | |
Mojo::Transaction | Transaction base class | metacpan | |
Mojo::Transaction::HTTP | HTTP transaction | metacpan | |
Mojo::Transaction::WebSocket | WebSocket transaction | metacpan | |
Mojo::URL | Uniform Resource Locator | metacpan | |
Mojo::Upload | Upload | metacpan | |
Mojo::UserAgent | Non-blocking I/O HTTP and WebSocket user agent | metacpan | |
Mojo::UserAgent::CookieJar | Cookie jar for HTTP user agents | metacpan | |
Mojo::UserAgent::Proxy | User agent proxy manager | metacpan | |
Mojo::UserAgent::Server | Application server | metacpan | |
Mojo::UserAgent::Transactor | User agent transactor | metacpan | |
Mojo::Util | Portable utility functions | metacpan | |
Mojolicious | Real-time web framework | 6.19 | metacpan |
Mojolicious::Command | Command base class | metacpan | |
Mojolicious::Command::cgi | CGI command | metacpan | |
Mojolicious::Command::cpanify | Cpanify command | metacpan | |
Mojolicious::Command::daemon | Daemon command | metacpan | |
Mojolicious::Command::eval | Eval command | metacpan | |
Mojolicious::Command::generate | Generator command | metacpan | |
Mojolicious::Command::generate::app | App generator command | metacpan | |
Mojolicious::Command::generate::lite_app | Lite app generator command | metacpan | |
Mojolicious::Command::generate::makefile | Makefile generator command | metacpan | |
Mojolicious::Command::generate::plugin | Plugin generator command | metacpan | |
Mojolicious::Command::get | Get command | metacpan | |
Mojolicious::Command::inflate | Inflate command | metacpan | |
Mojolicious::Command::prefork | Prefork command | metacpan | |
Mojolicious::Command::psgi | PSGI command | metacpan | |
Mojolicious::Command::routes | Routes command | metacpan | |
Mojolicious::Command::test | Test command | metacpan | |
Mojolicious::Command::version | Version command | metacpan | |
Mojolicious::Commands | Command line interface | metacpan | |
Mojolicious::Controller | Controller base class | metacpan | |
Mojolicious::Lite | Micro real-time web framework | metacpan | |
Mojolicious::Plugin | Plugin base class | metacpan | |
Mojolicious::Plugin::Charset | Charset plugin | metacpan | |
Mojolicious::Plugin::Config | Perl-ish configuration plugin | metacpan | |
Mojolicious::Plugin::DefaultHelpers | Default helpers plugin | metacpan | |
Mojolicious::Plugin::EPLRenderer | Embedded Perl Lite renderer plugin | metacpan | |
Mojolicious::Plugin::EPRenderer | Embedded Perl renderer plugin | metacpan | |
Mojolicious::Plugin::HeaderCondition | Header condition plugin | metacpan | |
Mojolicious::Plugin::JSONConfig | JSON configuration plugin | metacpan | |
Mojolicious::Plugin::Mount | Application mount plugin | metacpan | |
Mojolicious::Plugin::PODRenderer | POD renderer plugin | metacpan | |
Mojolicious::Plugin::TagHelpers | Tag helpers plugin | metacpan | |
Mojolicious::Plugins | Plugin manager | metacpan | |
Mojolicious::Renderer | Generate dynamic content | metacpan | |
Mojolicious::Routes | Always find your destination with routes! | metacpan | |
Mojolicious::Routes::Match | Find routes | metacpan | |
Mojolicious::Routes::Pattern | Routes pattern engine | metacpan | |
Mojolicious::Routes::Route | Route | metacpan | |
Mojolicious::Sessions | Signed cookie based session manager | metacpan | |
Mojolicious::Static | Serve static files | metacpan | |
Mojolicious::Types | MIME types | metacpan | |
Mojolicious::Validator | Validate values | metacpan | |
Mojolicious::Validator::Validation | Perform validations | metacpan | |
Test::Mojo | Testing Mojo! | metacpan | |
ojo | Fun one-liners with Mojo! | metacpan |