Miyagawa Plack::middleware::xsendfile — known CVE vulnerabilities

Every CVE whose affected-product data names Miyagawa Plack::middleware::xsendfile, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-7381 — CVSS 9.1 (critical): Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting. Plack::Middleware::XSendfile…