DEBIAN-CVE-2026-15747

Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle. csrftoken generates and caches one token per session and returns the same value on every call, and csrffield places that value in a hidden csrftoken input...

CVE-2026-15747

creationtimestamp| type| source ---|---|--- 2026-07-14 17:41:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqmquxixea2t 2026-07-15 17:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpbfq4srt2w 2026-07-16 09:32:04+00:00| seen|...