Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 18, 2026 · NIST NVD

   Detected

   Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the set_add method were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that version 0.9.0 fixed a similar issue CVE-2026-46719 for metric names.

2. Jun 19, 2026 · NIST NVD

   Updated

   Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the set_add method were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that version 0.9.0 fixed a similar issue CVE-2026-46719 for metric names.

Sources

• CVE.orgVulnerability recordCVE-2026-8788

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-8788

  Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the set_add method were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that version 0.9.0 fixed a simi

  nvd.nist.gov

References

• Reference · metacpan.org
• Reference · cve.org