| Release | Version |
|---|---|
| bookworm | 0.400001+dfsg-1 |
| trixie | 1.1.2+dfsg-1 |
| forky | 2.2.2-1 |
| sid | 2.2.2-1 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-93712 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from out ... |
| CVE-2026-93711 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from res ... |
| CVE-2026-13577 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Dancer2 versions before 2.2.0 for Perl generate insecure session ids w ... |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-93709 | vulnerable | vulnerable | fixed | fixed | Dancer2 versions before 2.2.0 for Perl serve a layout as a page when a ... |
| Bug | Description |
|---|---|
| CVE-2026-93710 | Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route tha ... |