6.5
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Description
Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections.
The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
Basic Information
ID
CVE-2026-46719
Source
CPANSec
Published
May 16, 2026 at 13:37
Modified
May 19, 2026 at 12:51
Affected Product
Vendor
RRWO
Product
Net::Statsd::Lite
Affected Versions
RRWO Net::Statsd::Lite 0