Skip to content

Add comparable CPANSA candidates from the backfill #118

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
p-linnane merged 1 commit into from
Aug 13, 2026
Merged

Add comparable CPANSA candidates from the backfill #118

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
61 changes: 61 additions & 0 deletions advisories/BREW-abcde-CPANSA-Mojolicious-2014-01.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,61 @@
{
"schema_version": "1.7.3",
"id": "BREW-abcde-CPANSA-Mojolicious-2014-01",
"published": "2026-08-13T09:10:09Z",
"modified": "2026-08-13T09:10:09Z",
"upstream": [
"CPANSA-Mojolicious-2014-01"
],
"affected": [
{
"package": {
"ecosystem": "Homebrew",
"name": "abcde",
"purl": "pkg:brew/abcde"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.3_1"
}
]
}
],
"ecosystem_specific": {
"fix": "bump",
"range_state": "fixed",
"upstream_fixed_in": "5.48",
"resource": "Mojo::Base",
"resource_purl": "pkg:cpan/SRI/Mojolicious@8.64"
}
}
],
"database_specific": {
"source": "matched",
"strategy": "cpansa",
"confidence": "medium",
"upstream_evidence": [
{
"strategy": "cpansa",
"ecosystem": "CPAN",
"name": "Mojolicious",
"subject_version": "8.64",
"key": "pkg:cpan/SRI/Mojolicious@8.64",
"resource": "Mojo::Base"
}
]
},
"summary": "Context sensitivity of method param could lead to parameter injection attacks.",
"details": "Context sensitivity of method param could lead to parameter injection attacks.\n",
"references": [
{
"type": "WEB",
"url": "https://github.com/mojolicious/mojo/commit/a815d4797145f872ef6e9f1270841eda1d410afb"
}
]
}
65 changes: 65 additions & 0 deletions advisories/BREW-abcde-CPANSA-Mojolicious-2015-01.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,65 @@
{
"schema_version": "1.7.3",
"id": "BREW-abcde-CPANSA-Mojolicious-2015-01",
"published": "2026-08-13T09:10:09Z",
"modified": "2026-08-13T09:10:09Z",
"upstream": [
"CPANSA-Mojolicious-2015-01"
],
"affected": [
{
"package": {
"ecosystem": "Homebrew",
"name": "abcde",
"purl": "pkg:brew/abcde"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.3_1"
}
]
}
],
"ecosystem_specific": {
"fix": "bump",
"range_state": "fixed",
"upstream_fixed_in": "5.76",
"resource": "Mojo::Base",
"resource_purl": "pkg:cpan/SRI/Mojolicious@8.64"
}
}
],
"database_specific": {
"source": "matched",
"strategy": "cpansa",
"confidence": "medium",
"upstream_evidence": [
{
"strategy": "cpansa",
"ecosystem": "CPAN",
"name": "Mojolicious",
"subject_version": "8.64",
"key": "pkg:cpan/SRI/Mojolicious@8.64",
"resource": "Mojo::Base"
}
]
},
"summary": "Directory traversal on Windows",
"details": "Directory traversal on Windows\n",
"references": [
{
"type": "WEB",
"url": "https://github.com/mojolicious/mojo/issues/738"
},
{
"type": "WEB",
"url": "https://github.com/mojolicious/mojo/commit/9ffa38fca73a9ddee91cbc70e0696268d500edde"
}
]
}
65 changes: 65 additions & 0 deletions advisories/BREW-abcde-CPANSA-Mojolicious-2018-02.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,65 @@
{
"schema_version": "1.7.3",
"id": "BREW-abcde-CPANSA-Mojolicious-2018-02",
"published": "2026-08-13T09:10:09Z",
"modified": "2026-08-13T09:10:09Z",
"upstream": [
"CPANSA-Mojolicious-2018-02"
],
"affected": [
{
"package": {
"ecosystem": "Homebrew",
"name": "abcde",
"purl": "pkg:brew/abcde"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.3_1"
}
]
}
],
"ecosystem_specific": {
"fix": "bump",
"range_state": "fixed",
"upstream_fixed_in": "7.78",
"resource": "Mojo::Base",
"resource_purl": "pkg:cpan/SRI/Mojolicious@8.64"
}
}
],
"database_specific": {
"source": "matched",
"strategy": "cpansa",
"confidence": "medium",
"upstream_evidence": [
{
"strategy": "cpansa",
"ecosystem": "CPAN",
"name": "Mojolicious",
"subject_version": "8.64",
"key": "pkg:cpan/SRI/Mojolicious@8.64",
"resource": "Mojo::Base"
}
]
},
"summary": "GET requests with embedded backslashes can be used to access local files on Windows hosts",
"details": "GET requests with embedded backslashes can be used to access local files on Windows hosts\n",
"references": [
{
"type": "WEB",
"url": "https://github.com/mojolicious/mojo/pull/1217"
},
{
"type": "WEB",
"url": "https://github.com/mojolicious/mojo/commit/23ebe051d9378f0f122e3c908845fc0c2cae0106"
}
]
}
65 changes: 65 additions & 0 deletions advisories/BREW-abcde-CPANSA-Mojolicious-2018-03.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,65 @@
{
"schema_version": "1.7.3",
"id": "BREW-abcde-CPANSA-Mojolicious-2018-03",
"published": "2026-08-13T09:10:09Z",
"modified": "2026-08-13T09:10:09Z",
"upstream": [
"CPANSA-Mojolicious-2018-03"
],
"affected": [
{
"package": {
"ecosystem": "Homebrew",
"name": "abcde",
"purl": "pkg:brew/abcde"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.3_1"
}
]
}
],
"ecosystem_specific": {
"fix": "bump",
"range_state": "fixed",
"upstream_fixed_in": "7.80",
"resource": "Mojo::Base",
"resource_purl": "pkg:cpan/SRI/Mojolicious@8.64"
}
}
],
"database_specific": {
"source": "matched",
"strategy": "cpansa",
"confidence": "medium",
"upstream_evidence": [
{
"strategy": "cpansa",
"ecosystem": "CPAN",
"name": "Mojolicious",
"subject_version": "8.64",
"key": "pkg:cpan/SRI/Mojolicious@8.64",
"resource": "Mojo::Base"
}
]
},
"summary": "Mojo::UserAgent was not checking peer SSL certificates by default.",
"details": "Mojo::UserAgent was not checking peer SSL certificates by default.\n",
"references": [
{
"type": "WEB",
"url": "https://github.com/mojolicious/mojo/pull/1226"
},
{
"type": "WEB",
"url": "https://github.com/mojolicious/mojo/commit/d3cbbad890673612fdbdea63fdd522b516f6104c"
}
]
}
61 changes: 61 additions & 0 deletions advisories/BREW-abcde-CPANSA-Mojolicious-2018-04.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,61 @@
{
"schema_version": "1.7.3",
"id": "BREW-abcde-CPANSA-Mojolicious-2018-04",
"published": "2026-08-13T09:10:09Z",
"modified": "2026-08-13T09:10:09Z",
"upstream": [
"CPANSA-Mojolicious-2018-04"
],
"affected": [
{
"package": {
"ecosystem": "Homebrew",
"name": "abcde",
"purl": "pkg:brew/abcde"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.9.3_1"
}
]
}
],
"ecosystem_specific": {
"fix": "bump",
"range_state": "fixed",
"upstream_fixed_in": "7.92",
"resource": "Mojo::Base",
"resource_purl": "pkg:cpan/SRI/Mojolicious@8.64"
}
}
],
"database_specific": {
"source": "matched",
"strategy": "cpansa",
"confidence": "medium",
"upstream_evidence": [
{
"strategy": "cpansa",
"ecosystem": "CPAN",
"name": "Mojolicious",
"subject_version": "8.64",
"key": "pkg:cpan/SRI/Mojolicious@8.64",
"resource": "Mojo::Base"
}
]
},
"summary": "This release reverts the addition of stream classes (added in 7.83), which have unfortunately resulted in many Mojolicious applications becoming unstable. While there are no known exploits yet, we've chosen to err on the side of cautiousness and will classify this as a security issue.",
"details": "This release reverts the addition of stream classes (added in 7.83), which have unfortunately resulted in many Mojolicious applications becoming unstable. While there are no known exploits yet, we've chosen to err on the side of cautiousness and will classify this as a security issue.\n",
"references": [
{
"type": "WEB",
"url": "https://github.com/mojolicious/mojo/commit/61f6cbf22c7bf8eb4787bd1014d91ee2416c73e7"
}
]
}
58 changes: 58 additions & 0 deletions advisories/BREW-abcde-CPANSA-Mojolicious-2021-02.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,58 @@
{
"schema_version": "1.7.3",
"id": "BREW-abcde-CPANSA-Mojolicious-2021-02",
"published": "2026-08-13T09:10:09Z",
"modified": "2026-08-13T09:10:09Z",
"upstream": [
"CPANSA-Mojolicious-2021-02"
],
"affected": [
{
"package": {
"ecosystem": "Homebrew",
"name": "abcde",
"purl": "pkg:brew/abcde"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"ecosystem_specific": {
"fix": null,
"range_state": "affected",
"upstream_fixed_in": "9.91",
"resource": "Mojo::Base",
"resource_purl": "pkg:cpan/SRI/Mojolicious@8.64"
}
}
],
"database_specific": {
"source": "matched",
"strategy": "cpansa",
"confidence": "medium",
"upstream_evidence": [
{
"strategy": "cpansa",
"ecosystem": "CPAN",
"name": "Mojolicious",
"subject_version": "8.64",
"key": "pkg:cpan/SRI/Mojolicious@8.64",
"resource": "Mojo::Base"
}
]
},
"summary": "Small sessions could be used as part of a brute-force attack to decode the session secret.",
"details": "Small sessions could be used as part of a brute-force attack to decode the session secret.\n",
"references": [
{
"type": "WEB",
"url": "https://github.com/mojolicious/mojo/pull/1791"
}
]
}
Loading