GHSA-2x39-j499-jv87MediumCVSS 6.5
Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names...
🔗 CVE IDs covered (1)
📋 Description
Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections.
The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-46719
- https://github.com/robrwo/Net-Statsd-Lite/commit/e1a8ab866d75c2827982134e9cf7e51a7f771153.patch
- https://metacpan.org/release/RRWO/Net-Statsd-Lite-v0.9.0/changes
- http://www.openwall.com/lists/oss-security/2026/05/16/9
- https://github.com/advisories/GHSA-2x39-j499-jv87