๐Ÿ” CVE Alert

CVE-2026-46720

HIGH 8.2

Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections

CVSS Score
8.2
EPSS Score
0.0%
EPSS Percentile
0th

Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

CWE CWE-93
Vendor rrwo
Product net::statsd::tiny
Published May 17, 2026
Last Updated May 18, 2026
Stay Ahead of the Next One

Get instant alerts for rrwo net::statsd::tiny

Be the first to know when new high vulnerabilities affecting rrwo net::statsd::tiny are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

RRWO / Net::Statsd::Tiny
0 < 0.3.8

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
metacpan.org: https://metacpan.org/release/RRWO/Net-Statsd-Tiny-v0.3.8/changes github.com: https://github.com/robrwo/Net-Statsd-Tiny/commit/06f814f52fbcc0b2afddf7a2d6f8137fd3cede13.patch cve.org: https://www.cve.org/CVERecord?id=CVE-2026-46719