VYPR

Maypole

by Perl Foundation

CVEs (1)

  • CVE-2025-15578CriFeb 16, 2026
    risk 0.64cvss 9.8epss 0.00

    Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely. The session id is seeded with the system time (which is available from HTTP response headers), a call to the built-in rand() function, and the PID.