Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-8722

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections

Description

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TEAM Net::Async::Statsd::Client

Default version status: unaffected

  • 0 to ≤ 0.005affected

References