Security Advisories (1)
CVE-2025-15578 (2026-02-16)

Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely. The session id is seeded with the system time (which is available from HTTP response headers), a call to the built-in rand() function, and the PID.

Changes for version 2.10

  • Multiple Template Paths added ( http://rt.cpan.org/NoAuth/Bug.html?id=13447 ) Small fix to templates/factory/frontpage ( http://rt.cpan.org/NoAuth/Bug.html?id=11236 ) MasonX support in Maypole::Application ( https://rt.cpan.org/NoAuth/Bug.html?id=12383 ) Maypole::Model::CDBI::Plain / Maypole Config issue ( http://rt.cpan.org/NoAuth/Bug.html?id=11530 ) Repeat Submission detection support ( Bug #6500 ) Fix to setup_database in Maypole::Model::CDBI ( Bug #12384 ) Fix to plugin to allow Maypole::Plugin::Config::YAML to work Fix to Maypole::Model::CDBI order sub from list
  • Additional Requirements : Digest::MD5

Documentation

The Maypole Manual
Introduction to Maypole
The Beer Database, Twice
The Maypole iBuySpy Portal
Flox: A Free Social Networking Site
Maypole Model Classes
Maypole Request Hacking Cookbook
Maypole's Standard Templates and Actions
Maypole View Classes
Maypole's Request Workflow

Modules

Apache front-end to Maypole
CGI-based front-end to Maypole
MVC web application framework
Universal Maypole Frontend
Command line interface to Maypole for testing and debugging
Maypole Configuration Class
Maypole predefined constants
Convenience wrapper around HTTP::Headers
Base class for model classes
Model class based on Class::DBI
Class::DBI model without ::Loader
Base class for view classes
A Template Toolkit view class for Maypole

Provides

in ex/BeerDB.pm