Threats affecting pkg:cpan/http-session

HTTP::Session versions before 0.54 for Perl contain a CRLF injection vulnerability in the HTTP::Session::Store::CHI component. This flaw allows an attacker to inject memcached commands by supplying session IDs with carriage return and line feed characters, which are not filtered or escaped by the CHI store. The vulnerability is fixed in version 0.54.