Plack-Middleware-ETag vulnerabilities

CVEs whose affected-version data names the Plack-Middleware-ETag package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111946Medium· 5.3

2w ago

Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header

Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When the response body is a filehandle and the file_etag option is not set, the ETag is built from the file's inode …

▾ SunlitEPSS 0.34%via CVEORG