PatchTheCVEmojolicious vulnerabilities and fixes
Recent CVEs affecting mojolicious, with upgrade or downgrade steps. 3 tracked.
mojolicious has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-05-03. Highest priority: CVE-2024-58134 (score 45/100).
- CVE-2024-58135 MEDIUM 5.3 UPGRADE Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo
- CVE-2024-58134 HIGH 8.1 UPGRADE Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an H
- CVE-2021-47208 MEDIUM 4.3 UPGRADE The Mojolicious module before 9.11 for Perl has a bug in format detection that can potentially be exploited fo
FAQ
How do I fix mojolicious vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mojolicious being exploited right now?
None of the tracked mojolicious CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mojolicious CVE should I patch first?
CVE-2024-58134 currently ranks highest (45/100): Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an H.