Mojolicious 2.43 Deleted
Security Advisories
Mojo::DOM did not correctly parse <script> tags.
- https://github.com/mojolicious/mojo/commit/6f195d85db6756022d3599f7d2634975688c9550
- https://github.com/mojolicious/mojo/issues/2014
- https://github.com/mojolicious/mojo/issues/2015
Fixed version: >=9.31
Reported: 2022-12-10
Small sessions could be used as part of a brute-force attack to decode the session secret.
Reported: 2021-06-01
CVE-2021-47208
A bug in format detection can potentially be exploited for a DoS attack.
- https://github.com/mojolicious/mojo/issues/1736
- https://github.com/mojolicious/mojo/commit/a0c4576ffb11c235088550de9ba7ac4196e1953c
Reported: 2021-03-16
CVE-2020-36829
Mojo::Util secure_compare can leak the string length. By immediately returning when the two strings are not the same length, the function allows an attacker to guess the length of the secret string using timing attacks.
Reported: 2020-11-10
Mojo::UserAgent was not checking peer SSL certificates by default.
- https://github.com/mojolicious/mojo/pull/1226
- https://github.com/mojolicious/mojo/commit/d3cbbad890673612fdbdea63fdd522b516f6104c
Severity: high
Reported: 2018-05-19
GET requests with embedded backslashes can be used to access local files on Windows hosts
- https://github.com/mojolicious/mojo/pull/1217
- https://github.com/mojolicious/mojo/commit/23ebe051d9378f0f122e3c908845fc0c2cae0106
Severity: critical
Reported: 2018-05-11
CVE-2018-25100
Mojo::UserAgent::CookieJar leaks old cookies because of the missing host_only flag on empty domain.
- https://github.com/mojolicious/mojo/pull/1192
- https://github.com/mojolicious/mojo/issues/1185
- https://github.com/mojolicious/mojo/commit/c16a56a9d6575ddc53d15e76d58f0ebcb0eeb149
Severity: minor
Reported: 2018-02-13
Directory traversal on Windows
- https://github.com/mojolicious/mojo/issues/738
- https://github.com/mojolicious/mojo/commit/9ffa38fca73a9ddee91cbc70e0696268d500edde
Severity: critical
Reported: 2015-02-02
Context sensitivity of method param could lead to parameter injection attacks.
Severity: high
Reported: 2014-10-07
Kwalitee Issues
- no_mymeta_files
-
Update MANIFEST.SKIP to exclude MYMETA files. If you are lazy, add "#!install_default" in your MANIFEST.SKIP and update your ExtUtils::Manifest if necessary, then some of the most common files will be excluded.
- use_strict
-
Add 'use strict' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules are strictly written.
Error: Mojo::HelloWorld
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Mojo::HelloWorld
- consistent_version
-
Split the distribution, or fix the version numbers to make them consistent (use the highest version number to avoid version downgrade).
Error: 2.43,2147483647.000
- meta_yml_has_provides
-
Add all modules contained in this distribution to the META.yml field 'provides'. Module::Build or Dist::Zilla::Plugin::MetaProvides do this automatically for you.
Modules
Name | Abstract | Version | View |
---|---|---|---|
Mojo | Duct tape for the HTML5 web! | metacpan | |
Mojo::Asset | HTTP 1.1 content storage base class | metacpan | |
Mojo::Asset::File | File storage for HTTP 1.1 content | metacpan | |
Mojo::Asset::Memory | In-memory storage for HTTP 1.1 content | metacpan | |
Mojo::Base | Minimal base class for Mojo projects | metacpan | |
Mojo::ByteStream | ByteStream | metacpan | |
Mojo::Cache | Naive in-memory cache | metacpan | |
Mojo::Collection | Collection | metacpan | |
Mojo::Command | Command base class | metacpan | |
Mojo::Content | HTTP 1.1 content base class | metacpan | |
Mojo::Content::MultiPart | HTTP 1.1 multipart content container | metacpan | |
Mojo::Content::Single | HTTP 1.1 content container | metacpan | |
Mojo::Cookie | HTTP 1.1 cookie base class | metacpan | |
Mojo::Cookie::Request | HTTP 1.1 request cookie container | metacpan | |
Mojo::Cookie::Response | HTTP 1.1 response cookie container | metacpan | |
Mojo::CookieJar | Cookie jar for HTTP 1.1 user agents | metacpan | |
Mojo::DOM | Minimalistic HTML5/XML DOM parser with CSS3 selectors | metacpan | |
Mojo::DOM::CSS | CSS3 selector engine | metacpan | |
Mojo::DOM::HTML | HTML5/XML engine | metacpan | |
Mojo::Date | HTTP 1.1 date container | metacpan | |
Mojo::EventEmitter | Event emitter base class | metacpan | |
Mojo::Exception | Exceptions with context | metacpan | |
Mojo::Headers | Headers | metacpan | |
Mojo::HelloWorld | Hello World! | metacpan | |
Mojo::Home | Detect and access the project root directory in Mojo | metacpan | |
Mojo::IOLoop | Minimalistic reactor for non-blocking TCP clients and servers | metacpan | |
Mojo::IOLoop::Client | Non-blocking TCP client | metacpan | |
Mojo::IOLoop::Delay | Synchronize events | metacpan | |
Mojo::IOLoop::Server | Non-blocking TCP server | metacpan | |
Mojo::IOLoop::Stream | Non-blocking I/O stream | metacpan | |
Mojo::IOWatcher | Non-blocking I/O watcher | metacpan | |
Mojo::IOWatcher::EV | EV non-blocking I/O watcher | metacpan | |
Mojo::JSON | Minimalistic JSON | metacpan | |
Mojo::JSON::Pointer | JSON Pointers | metacpan | |
Mojo::Loader | Loader | metacpan | |
Mojo::Log | Simple logger for Mojo | metacpan | |
Mojo::Message | HTTP 1.1 message base class | metacpan | |
Mojo::Message::Request | HTTP 1.1 request container | metacpan | |
Mojo::Message::Response | HTTP 1.1 response container | metacpan | |
Mojo::Parameters | Parameter container | metacpan | |
Mojo::Path | Path | metacpan | |
Mojo::Server | HTTP server base class | metacpan | |
Mojo::Server::CGI | CGI server | metacpan | |
Mojo::Server::Daemon | Non-blocking I/O HTTP 1.1 and WebSocket server | metacpan | |
Mojo::Server::Hypnotoad | ALL GLORY TO THE HYPNOTOAD! | metacpan | |
Mojo::Server::Morbo | DOOOOOOOOOOOOOOOOOOM! | metacpan | |
Mojo::Server::PSGI | PSGI server | metacpan | |
Mojo::Template | Perl-ish templates! | metacpan | |
Mojo::Transaction | Transaction base class | metacpan | |
Mojo::Transaction::HTTP | HTTP 1.1 transaction container | metacpan | |
Mojo::Transaction::WebSocket | WebSocket transaction container | metacpan | |
Mojo::URL | Uniform Resource Locator | metacpan | |
Mojo::Upload | Upload container | metacpan | |
Mojo::UserAgent | Non-blocking I/O HTTP 1.1 and WebSocket user agent | metacpan | |
Mojo::UserAgent::Transactor | User agent transactor | metacpan | |
Mojo::Util | Portable utility functions | metacpan | |
Mojolicious | Real-time web framework | 2.43 | metacpan |
Mojolicious::Command::cgi | CGI command | metacpan | |
Mojolicious::Command::cpanify | Cpanify command | metacpan | |
Mojolicious::Command::daemon | Daemon command | metacpan | |
Mojolicious::Command::eval | Eval command | metacpan | |
Mojolicious::Command::generate | Generator command | metacpan | |
Mojolicious::Command::generate::app | App generator command | metacpan | |
Mojolicious::Command::generate::gitignore | Gitignore generator command | metacpan | |
Mojolicious::Command::generate::hypnotoad | Hypnotoad generator command | metacpan | |
Mojolicious::Command::generate::lite_app | Lite app generator command | metacpan | |
Mojolicious::Command::generate::makefile | Makefile generator command | metacpan | |
Mojolicious::Command::generate::plugin | Plugin generator command | metacpan | |
Mojolicious::Command::get | Get command | metacpan | |
Mojolicious::Command::inflate | Inflate command | metacpan | |
Mojolicious::Command::psgi | PSGI command | metacpan | |
Mojolicious::Command::routes | Routes command | metacpan | |
Mojolicious::Command::test | Test command | metacpan | |
Mojolicious::Command::version | Version command | 2147483647.000 | metacpan |
Mojolicious::Commands | Commands | metacpan | |
Mojolicious::Controller | Controller base class | metacpan | |
Mojolicious::Lite | Real-time micro web framework | metacpan | |
Mojolicious::Plugin | Plugin base class | metacpan | |
Mojolicious::Plugin::Charset | Charset plugin | metacpan | |
Mojolicious::Plugin::Config | Perl-ish configuration plugin | metacpan | |
Mojolicious::Plugin::DefaultHelpers | Default helpers plugin | metacpan | |
Mojolicious::Plugin::EPLRenderer | Embedded Perl Lite renderer plugin | metacpan | |
Mojolicious::Plugin::EPRenderer | Embedded Perl renderer plugin | metacpan | |
Mojolicious::Plugin::HeaderCondition | Header condition plugin | metacpan | |
Mojolicious::Plugin::I18N | Internationalization plugin | metacpan | |
Mojolicious::Plugin::JSONConfig | JSON configuration plugin | metacpan | |
Mojolicious::Plugin::Mount | Application mount plugin | metacpan | |
Mojolicious::Plugin::PODRenderer | POD renderer plugin | metacpan | |
Mojolicious::Plugin::PoweredBy | Powered by plugin | metacpan | |
Mojolicious::Plugin::RequestTimer | Request timer plugin | metacpan | |
Mojolicious::Plugin::TagHelpers | Tag helpers plugin | metacpan | |
Mojolicious::Plugins | Plugins | metacpan | |
Mojolicious::Renderer | MIME type based renderer | metacpan | |
Mojolicious::Routes | Always find your destination with routes | metacpan | |
Mojolicious::Routes::Match | Routes visitor | metacpan | |
Mojolicious::Routes::Pattern | Routes pattern engine | metacpan | |
Mojolicious::Sessions | Signed cookie based sessions | metacpan | |
Mojolicious::Static | Serve static files | metacpan | |
Mojolicious::Types | MIME types | metacpan | |
Test::Mojo | Testing Mojo! | metacpan | |
ojo | Fun Oneliners with Mojo! | metacpan |