CVE-2026-46719
Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections.
Published May 16, 2026 · updated Jun 19, 2026
Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
May 16, 2026 · NIST NVD
Detected
Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
Jun 19, 2026 · NIST NVD
Updated
Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
Sources
- CVE.orgVulnerability recordCVE-2026-46719
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-46719
Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
nvd.nist.gov