Mandriva Linux Security Advisory 2014-235 - Plack::App::File would previously strip trailing slashes off provided paths. This in combination with the common pattern of serving files with Plack::Middleware::Static could allow an attacker to bypass a whitelist of generated files.
ffd5432731e6114de1f6fb03fdbfbba1a28f30ebad18de3760db8f1515a334c3