← All advisories

High severity7.5NVD Advisory· Published Dec 9, 2025· Updated Jun 16, 2026

CVE-2013-10031

CVE-2013-10031

Description

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Plack Project/Plack Middleware Session2 versions
cpe:2.3:a:plack:plack-middleware-session:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:plack:plack-middleware-session:*:*:*:*:*:*:*:*range: <0.17
- (no CPE)range: <0.17
Miyagawa/Plack::Middleware::Session::Cookiecpe-rescue
Range: 0.01

Patches

Vulnerability mechanics

References

1

github.com/plack/Plack-Middleware-Session/commit/b7f0252269ba1bb812b5dc02303754fe94c808e4nvdPatch

News mentions

0

No linked articles in our index yet.