/ 
Mojolicious-Plugin-SessionStore-0.05
⭐ Starred 2 / Mojolicious::Plugin::SessionStore
Security Advisories (1)
CVE-2026-9692 (2026-06-18)

Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address of an anonymous hash, and the PID. These are predictable or low-entropy sources that are unsuitable for security purposes.

NAME

Mojolicious::Plugin::SessionStore - session data store plugin for Mojolicious

SYNOPSIS

use Mojolicious::Lite;
use Plack::Session::Store::File;

plugin SessionStore => Plack::Session::Store::File->new;

DESCRIPTION

Mojolicious::Plugin::SessionStore is a session data store plugin for Mojolicious. It creates Mojolicious::Sessions::Storable instance with provided session data store instance.

OPTIONS

Mojolicious::Plugin::SessionStore accepts all options of Mojolicious::Sessions::Storable.

If a single option is provided, which is expected to be an option of Mojolicious::Sessions::Storable@session_store.

If no option is provided the default <Mojolicious::Session> will be used.

METHODS

Mojolicious::Plugin::SessionStore inherits all methods from Mojolicious::Plugin.

AUTHOR

hayajo <hayajo@cpan.org>

COPYRIGHT

Copyright 2013- hayajo

LICENSE

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

SEE ALSO

Mojolicious, Mojolicious::Sessions, Mojolicious::Sessions::Storable, Plack::Middleware::Session