/ 
Starch-0.14
River stage two • 10 direct dependents • 10 total dependents
⭐ Starred 3 GitHub stars
Security Advisories (1)
CVE-2025-40925 (2025-09-20)

Starch versions 0.14 and earlier generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with a counter, the epoch time, the built-in rand function, the PID, and internal Perl reference addresses. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. Predicable session ids could allow an attacker to gain access to systems.

Changes for version 0.14 - 2019-05-13

  • Avoid CPANTS Kwalitee check for Test2::V0.
  • Switch to the GNU General Public License version 3.
  • Stop using Test2::Require::Module in Test::Starch.

Documentation

Starch::Cookbook
Starch recipes for common situations.
Starch::Extending
How to alter the behavior of Starch.

Modules

Starch
A framework independent HTTP session library.
Starch::Factory
Role applicator and class creator.
Starch::Manager
Entry point for accessing Starch state objects.
Starch::Plugin::AlwaysLoad
Always retrieve state data.
Starch::Plugin::Bundle
Base role for Starch plugin bundles.
Starch::Plugin::CookieArgs
Arguments and methods for dealing with HTTP cookies.
Starch::Plugin::DisableStore
Disable store read and/or write operations.
Starch::Plugin::ForManager
Base role for Starch plugins.
Starch::Plugin::ForState
Base role for Starch::State plugins.
Starch::Plugin::ForStore
Base role for Starch::Store plugins.
Starch::Plugin::LogStoreExceptions
Turn Starch store exceptions into log messages.
Starch::Plugin::RenewExpiration
Trigger periodic writes to the store.
Starch::Plugin::ThrottleStore
Throttle misbehaving Starch stores.
Starch::Plugin::Trace
Add extra trace logging to your manager, states, and stores.
Starch::Role::Log
Logging capabilities used internally by Starch.
Starch::State
The Starch state object.
Starch::Store
Base role for Starch stores.
Starch::Store::Layered
Layer multiple Starch stores.
Starch::Store::Memory
In-memory Starch store.
Starch::Util
Utility functions used internally by Starch.
Test::Starch
Test core features of starch.

Provides

Starch::Plugin::CookieArgs::Manager
in lib/Starch/Plugin/CookieArgs/Manager.pm
Starch::Plugin::CookieArgs::State
in lib/Starch/Plugin/CookieArgs/State.pm
Starch::Plugin::RenewExpiration::Manager
in lib/Starch/Plugin/RenewExpiration/Manager.pm
Starch::Plugin::RenewExpiration::State
in lib/Starch/Plugin/RenewExpiration/State.pm
Starch::Plugin::Trace::Manager
in lib/Starch/Plugin/Trace/Manager.pm
Starch::Plugin::Trace::State
in lib/Starch/Plugin/Trace/State.pm
Starch::Plugin::Trace::Store
in lib/Starch/Plugin/Trace/Store.pm

Other files