{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"libapache-session-perl","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5NA9NWJFDP4VV8V4WHN8TWS","modified_at":"2026-09-01T20:02:12.347749669Z","published_at":"2026-05-08T08:16:43.463Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2013-10075","https://security-tracker.debian.org/tracker/CVE-2013-10075"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2013-10075#Debian:14/libapache-session-perl","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2013-10075"}],"summary":"Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exis"}