CVE 5.3 MEDIUM

Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses_CVE-2026-45179

5.3 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses.

If the communication channel to the statsd daemon is not secured (for example, by sending UDP packets to a host on another network), then users' IP addresses may be leaked.

Since version 0.9.0, the IP address is no longer logged to statsd unless configured. When configured, an HMAC signature of the IP address is logged instead.

Basic Information

ID CVE-2026-45179
Source CPANSec
Published May 10, 2026 at 19:10
Modified May 12, 2026 at 13:47

Affected Product

Vendor RRWO
Product Plack::Middleware::Statsd
Affected Versions RRWO Plack::Middleware::Statsd 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.