Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged

Permalink CVE-2013-10031

7.5 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): NONE
Availability impact (A): NONE

created 4 months ago

Plack::Middleware::Session versions before 0.17 for Perl may be vulnerable to HMAC comparison timing attacks

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks

References

https://github.com/plack/Plack-Middleware-Session/commit/b7f0252269ba1bb812b5dc… patch

Affected products

Plack-Middleware-Session

<0.17

Matching in nixpkgs

pkgs.perlPackages.PlackMiddlewareSession

Middleware for session management

nixos-unstable 0.33
- nixpkgs-unstable 0.33
- nixos-unstable-small 0.33
nixos-25.11 0.33
- nixpkgs-25.11-darwin 0.33

pkgs.perl538Packages.PlackMiddlewareSession

Middleware for session management

nixos-unstable 0.33
- nixpkgs-unstable 0.33
- nixos-unstable-small 0.33
nixos-25.11 0.33
- nixpkgs-25.11-darwin 0.33

pkgs.perl540Packages.PlackMiddlewareSession

Middleware for session management

nixos-unstable 0.33
- nixpkgs-unstable 0.33
- nixos-unstable-small 0.33
nixos-25.11 0.33
- nixpkgs-25.11-darwin 0.33