CVE-2026-46720
Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections.
Published May 17, 2026 · updated Jun 19, 2026
Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
May 17, 2026 · NIST NVD
Detected
Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
Jun 19, 2026 · NIST NVD
Updated
Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
Sources
- CVE.orgVulnerability recordCVE-2026-46720
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-46720
Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
nvd.nist.gov