MIYAGAWA
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Plack::Middleware::Session | 1 | – | Jul 16, 2025 |
| Plack::Middleware::XSendfile | 1 | – | Apr 29, 2026 |
| Starman | 1 | – | Apr 28, 2026 |
Exploited and recent CVEs
- CVE-2026-7381 Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting 0.4%
- CVE-2026-40560 Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence 0.5%
- CVE-2025-40923 Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely 0.4%