Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 26, 2026 · NIST NVD

   Detected

   Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the cookie data, when there is no secret used to sign the cookie.

2. Jun 17, 2026 · NIST NVD

   Updated

   Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the cookie data, when there is no secret used to sign the cookie.

Affected

• cpe miyagawa/plack\

Sources

• CVE.orgVulnerability recordCVE-2014-125112

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2014-125112

  Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the

  nvd.nist.gov

References

• Mailing List · openwall.com
• Third Party Advisory · gist.github.com
• Release Notes · metacpan.org