Dancer2 0.204004
Security Advisories
There is a potential RCE with regards to Storable. We have added session ID validation to the session engine so that session backends based on Storable can reject malformed session IDs that may lead to exploitation of the RCE.
- http://lists.preshweb.co.uk/pipermail/dancer-users/2018-April/005952.html
- https://github.com/PerlDancer/Dancer2/commit/3580f5d0874a9abf5483528f73bda9a7fd9ec7f1
Fixed version: >=0.206000
Severity: critical
Reported: 2018-01-30
Kwalitee Issues
- has_readme
-
Add a README to the distribution. It should contain a quick description of your module and how to install it.
- meta_yml_declares_perl_version
-
If you are using Build.PL define the {requires}{perl} = VERSION field. If you are using MakeMaker (Makefile.PL) you should upgrade ExtUtils::MakeMaker to 6.48 and use MIN_PERL_VERSION parameter. Perl::MinimumVersion can help you determine which version of Perl your module needs.
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Dancer2::Template::Implementation::ForkedTiny
Modules
Name | Abstract | Version | View |
---|---|---|---|
Dancer2 | Lightweight yet powerful web application framework | 0.204004 | metacpan |
Dancer2::CLI | Dancer2 cli application | 0.204004 | metacpan |
Dancer2::CLI::Command::gen | create new Dancer2 application | 0.204004 | metacpan |
Dancer2::CLI::Command::version | display version | 0.204004 | metacpan |
Dancer2::Core | Core libraries for Dancer2 2.0 | 0.204004 | metacpan |
Dancer2::Core::App | encapsulation of Dancer2 packages | 0.204004 | metacpan |
Dancer2::Core::Cookie | A cookie representing class | 0.204004 | metacpan |
Dancer2::Core::DSL | Dancer2's Domain Specific Language (DSL) | 0.204004 | metacpan |
Dancer2::Core::Dispatcher | Class for dispatching request to the appropriate route handler | 0.204004 | metacpan |
Dancer2::Core::Error | Class representing fatal errors | 0.204004 | metacpan |
Dancer2::Core::Factory | Instantiate components by type and name | 0.204004 | metacpan |
Dancer2::Core::HTTP | helper for rendering HTTP status codes for Dancer2 | 0.204004 | metacpan |
Dancer2::Core::Hook | Manipulate hooks with Dancer2 | 0.204004 | metacpan |
Dancer2::Core::MIME | Class to ease manipulation of MIME types | 0.204004 | metacpan |
Dancer2::Core::Request | Interface for accessing incoming requests | 0.204004 | metacpan |
Dancer2::Core::Request::Upload | Class representing file upload requests | 0.204004 | metacpan |
Dancer2::Core::Response | Response object for Dancer2 | 0.204004 | metacpan |
Dancer2::Core::Response::Delayed | Delayed responses | 0.204004 | metacpan |
Dancer2::Core::Role::ConfigReader | Config role for Dancer2 core objects | 0.204004 | metacpan |
Dancer2::Core::Role::DSL | Role for DSL | 0.204004 | metacpan |
Dancer2::Core::Role::Engine | Role for engines | 0.204004 | metacpan |
Dancer2::Core::Role::Handler | Role for Handlers | 0.204004 | metacpan |
Dancer2::Core::Role::HasLocation | Role for application location "guessing" | 0.204004 | metacpan |
Dancer2::Core::Role::Hookable | Role for hookable objects | 0.204004 | metacpan |
Dancer2::Core::Role::Logger | Role for logger engines | 0.204004 | metacpan |
Dancer2::Core::Role::Serializer | Role for Serializer engines | 0.204004 | metacpan |
Dancer2::Core::Role::SessionFactory | Role for session factories | 0.204004 | metacpan |
Dancer2::Core::Role::SessionFactory::File | Role for file-based session factories | 0.204004 | metacpan |
Dancer2::Core::Role::StandardResponses | Role to provide commonly used responses | 0.204004 | metacpan |
Dancer2::Core::Role::Template | Role for template engines | 0.204004 | metacpan |
Dancer2::Core::Route | Dancer2's route handler | 0.204004 | metacpan |
Dancer2::Core::Runner | Top-layer class to start a dancer app | 0.204004 | metacpan |
Dancer2::Core::Session | class to represent any session object | 0.204004 | metacpan |
Dancer2::Core::Time | class to handle common helpers for time manipulations | 0.204004 | metacpan |
Dancer2::Core::Types | Moo types for Dancer2 core. | 0.204004 | metacpan |
Dancer2::FileUtils | File utility helpers | 0.204004 | metacpan |
Dancer2::Handler::AutoPage | Class for handling the AutoPage feature | 0.204004 | metacpan |
Dancer2::Handler::File | class for handling file content rendering | 0.204004 | metacpan |
Dancer2::Logger::Capture | Capture dancer logs | 0.204004 | metacpan |
Dancer2::Logger::Capture::Trap | a place to store captured Dancer2 logs | 0.204004 | metacpan |
Dancer2::Logger::Console | Console logger | 0.204004 | metacpan |
Dancer2::Logger::Diag | Test::More diag() logging engine for Dancer2 | 0.204004 | metacpan |
Dancer2::Logger::File | file-based logging engine for Dancer2 | 0.204004 | metacpan |
Dancer2::Logger::Note | Test::More note() logging engine for Dancer2 | 0.204004 | metacpan |
Dancer2::Logger::Null | Blackhole-like silent logging engine for Dancer2 | 0.204004 | metacpan |
Dancer2::Plugin | base class for Dancer2 plugins | 0.204004 | metacpan |
Dancer2::Serializer::Dumper | Serializer for handling Dumper data | 0.204004 | metacpan |
Dancer2::Serializer::JSON | Serializer for handling JSON data | 0.204004 | metacpan |
Dancer2::Serializer::Mutable | Serialize and deserialize content based on HTTP header | 0.204004 | metacpan |
Dancer2::Serializer::YAML | Serializer for handling YAML data | 0.204004 | metacpan |
Dancer2::Session::Simple | in-memory session backend for Dancer2 | 0.204004 | metacpan |
Dancer2::Session::YAML | YAML-file-based session backend for Dancer2 | 0.204004 | metacpan |
Dancer2::Template::Implementation::ForkedTiny | Dancer2 own implementation of Template::Tiny | 0.204004 | metacpan |
Dancer2::Template::Simple | Pure Perl 5 template engine for Dancer2 | 0.204004 | metacpan |
Dancer2::Template::TemplateToolkit | Template toolkit engine for Dancer2 | 0.204004 | metacpan |
Dancer2::Template::Tiny | Template::Tiny engine for Dancer2 | 0.204004 | metacpan |
Dancer2::Test | Useful routines for testing Dancer2 apps | 0.204004 | metacpan |