This update for perl-Mojolicious fixes the following issues:
- updated to 9.480.0 (9.48)
see /usr/share/doc/packages/perl-Mojolicious/Changes
9.48 2026-07-14
- Fixed a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now masked with a fresh
random value on every request, instead of being reused for the whole lifetime of a session.
CVE-2026-15747 boo#1271431
- updated to 9.470.0 (9.47)
see /usr/share/doc/packages/perl-Mojolicious/Changes
9.47 2026-07-05
- Added support for the QUERY HTTP request method from RFC 10008.
- Added query and query_p methods to Mojo::UserAgent.
- Added query method to Mojolicious::Routes::Route.
- Added query method to Mojolicious::Lite.
- Added query_ok method to Test::Mojo.
- Fixed a security issue where the pure-Perl implementation of Mojo::JSON could exhaust all available memory when
decoding deeply nested data. Decoding is now limited to 512 levels of nesting, to match the default of
Cpanel::JSON::XS.
- Fixed a memory leak in Morbo. (heikojansen)
- Fixed Mojo::File::list_tree to no longer follow symbolic links to directories.
- updated to 9.460.0 (9.46)
see /usr/share/doc/packages/perl-Mojolicious/Changes
9.46 2026-06-04
- Added random_bytes function to Mojo::Util. (leont)
- Improved randomness for CSRF token generation. (leont)
- Fixed tls_options handling in Mojo::IOLoop::TLS. (krauro)
- Fixed spec compliance issue with attribute selectors in Mojo::DOM::CSS.
-
Submitted by
Tina Müller (tinita)