Dancer2 0.151000 Deleted
Security Advisories
There is a potential RCE with regards to Storable. We have added session ID validation to the session engine so that session backends based on Storable can reject malformed session IDs that may lead to exploitation of the RCE.
- http://lists.preshweb.co.uk/pipermail/dancer-users/2018-April/005952.html
- https://github.com/PerlDancer/Dancer2/commit/3580f5d0874a9abf5483528f73bda9a7fd9ec7f1
Fixed version: >=0.206000
Severity: critical
Reported: 2018-01-30
Kwalitee Issues
- use_strict
-
Add 'use strict' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules are strictly written.
Error: Dancer2::CLI, Dancer2::CLI::Command::version
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Dancer2::CLI, Dancer2::CLI::Command::version, Dancer2::Template::Implementation::ForkedTiny
Modules
Name | Abstract | Version | View |
---|---|---|---|
Dancer2 | Lightweight yet powerful web application framework | 0.151000 | metacpan |
Dancer2::CLI | Dancer2 cli application | 0.151000 | metacpan |
Dancer2::CLI::Command::gen | create new Dancer2 application | 0.151000 | metacpan |
Dancer2::CLI::Command::version | display version | 0.151000 | metacpan |
Dancer2::Core | Core libraries for Dancer2 2.0 | 0.151000 | metacpan |
Dancer2::Core::App | encapsulation of Dancer2 packages | 0.151000 | metacpan |
Dancer2::Core::Cookie | A cookie representing class | 0.151000 | metacpan |
Dancer2::Core::DSL | Dancer2's Domain Specific Language (DSL) | 0.151000 | metacpan |
Dancer2::Core::Dispatcher | Class for dispatching request to the appropriate route handler | 0.151000 | metacpan |
Dancer2::Core::Error | Class representing fatal errors | 0.151000 | metacpan |
Dancer2::Core::Factory | Instantiate components by type and name | 0.151000 | metacpan |
Dancer2::Core::HTTP | helper for rendering HTTP status codes for Dancer2 | 0.151000 | metacpan |
Dancer2::Core::Hook | Manipulate hooks with Dancer2 | 0.151000 | metacpan |
Dancer2::Core::MIME | Class to ease manipulation of MIME types | 0.151000 | metacpan |
Dancer2::Core::Request | Interface for accessing incoming requests | 0.151000 | metacpan |
Dancer2::Core::Request::Upload | Class representing file upload requests | 0.151000 | metacpan |
Dancer2::Core::Response | Response object for Dancer2 | 0.151000 | metacpan |
Dancer2::Core::Role::ConfigReader | Config role for Dancer2 core objects | 0.151000 | metacpan |
Dancer2::Core::Role::DSL | Role for DSL | 0.151000 | metacpan |
Dancer2::Core::Role::Engine | Role for engines | 0.151000 | metacpan |
Dancer2::Core::Role::Handler | Role for Handlers | 0.151000 | metacpan |
Dancer2::Core::Role::HasLocation | Role for application location "guessing" | 0.151000 | metacpan |
Dancer2::Core::Role::Headers | Role for handling headers | 0.151000 | metacpan |
Dancer2::Core::Role::Hookable | Role for hookable objects | 0.151000 | metacpan |
Dancer2::Core::Role::Logger | Role for logger engines | 0.151000 | metacpan |
Dancer2::Core::Role::Serializer | Role for Serializer engines | 0.151000 | metacpan |
Dancer2::Core::Role::SessionFactory | Role for session factories | 0.151000 | metacpan |
Dancer2::Core::Role::SessionFactory::File | Role for file-based session factories | 0.151000 | metacpan |
Dancer2::Core::Role::StandardResponses | Role to provide commonly used responses | 0.151000 | metacpan |
Dancer2::Core::Role::Template | Role for template engines | 0.151000 | metacpan |
Dancer2::Core::Route | Dancer2's route handler | 0.151000 | metacpan |
Dancer2::Core::Runner | Top-layer class to start a dancer app | 0.151000 | metacpan |
Dancer2::Core::Session | class to represent any session object | 0.151000 | metacpan |
Dancer2::Core::Time | class to handle common helpers for time manipulations | 0.151000 | metacpan |
Dancer2::Core::Types | Moo types for Dancer2 core. | 0.151000 | metacpan |
Dancer2::FileUtils | File utility helpers | 0.151000 | metacpan |
Dancer2::Handler::AutoPage | Class for handling the AutoPage feature | 0.151000 | metacpan |
Dancer2::Handler::File | class for handling file content rendering | 0.151000 | metacpan |
Dancer2::Logger::Capture | Capture dancer logs | 0.151000 | metacpan |
Dancer2::Logger::Capture::Trap | a place to store captured Dancer2 logs | 0.151000 | metacpan |
Dancer2::Logger::Console | Console logger | 0.151000 | metacpan |
Dancer2::Logger::Diag | Test::More diag() logging engine for Dancer2 | 0.151000 | metacpan |
Dancer2::Logger::File | file-based logging engine for Dancer2 | 0.151000 | metacpan |
Dancer2::Logger::Note | Test::More note() logging engine for Dancer2 | 0.151000 | metacpan |
Dancer2::Logger::Null | Blackhole-like silent logging engine for Dancer2 | 0.151000 | metacpan |
Dancer2::Plugin | Extending Dancer2's DSL with plugins | 0.151000 | metacpan |
Dancer2::Plugin::Ajax | a plugin for adding Ajax route handlers | 0.151000 | metacpan |
Dancer2::Serializer::Dumper | Serializer for handling Dumper data | 0.151000 | metacpan |
Dancer2::Serializer::JSON | Serializer for handling JSON data | 0.151000 | metacpan |
Dancer2::Serializer::Mutable | Serialize and deserialize content based on HTTP header | 0.151000 | metacpan |
Dancer2::Serializer::YAML | Serializer for handling YAML data | 0.151000 | metacpan |
Dancer2::Session::Simple | in-memory session backend for Dancer2 | 0.151000 | metacpan |
Dancer2::Session::YAML | YAML-file-based session backend for Dancer2 | 0.151000 | metacpan |
Dancer2::Template::Implementation::ForkedTiny | Dancer2 own implementation of Template::Tiny | 0.151000 | metacpan |
Dancer2::Template::Simple | Pure Perl 5 template engine for Dancer2 | 0.151000 | metacpan |
Dancer2::Template::TemplateToolkit | Template toolkit engine for Dancer2 | 0.151000 | metacpan |
Dancer2::Template::Tiny | Template::Tiny engine for Dancer2 | 0.151000 | metacpan |
Dancer2::Test | Useful routines for testing Dancer2 apps | 0.151000 | metacpan |