Products: 2
    Vulnerabilities: 3
    Known Exploited: 0
    2
    Critical Level Threats
    0
    High Level Threats
    1
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-75866

    Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them

    Last Modified: Aug 25, 2026
    Published: Aug 22, 2026

    CVE-2026-75870

    Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret

    Last Modified: Aug 25, 2026
    Published: Aug 22, 2026

    CVE-2026-75628

    Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter

    Last Modified: Aug 28, 2026
    Published: Aug 20, 2026
    Items Per Page
    Punk Vulnerabilities & Security CVEs | CVE-DB