CVE-2026-45179

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-45179
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45179.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-45179
Aliases
  • GHSA-9gwm-665p-w2xx
Published
2026-05-10T19:10:57.492Z
Modified
2026-08-12T03:51:13.604528493Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses
Details

Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses.

If the communication channel to the statsd daemon is not secured (for example, by sending UDP packets to a host on another network), then users' IP addresses may be leaked.

Since version 0.9.0, the IP address is no longer logged to statsd unless configured. When configured, an HMAC signature of the IP address is logged instead.

Database specific 
{
    "cwe_ids": [
        "CWE-319"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45179.json",
    "cna_assigner": "CPANSec"
}
References

Affected packages

Git / github.com/robrwo/plack-middleware-statsd

Affected ranges

Type
GIT
Repo
https://github.com/robrwo/plack-middleware-statsd
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
792dad5b0747e06ccd0ebe3ccf2ec68399a13758
Database specific
Show details 
{
    "source": [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.9.0"
        }
    ]
}

Affected versions

v0.*
v0.1.0
v0.1.1
v0.2.0
v0.2.1
v0.3.0
v0.3.1
v0.3.10
v0.3.2
v0.3.3
v0.3.4
v0.3.5
v0.3.6
v0.3.7
v0.3.8
v0.3.9
v0.4.0
v0.4.1
v0.4.2
v0.4.3
v0.4.4
v0.4.5
v0.4.6
v0.4.7
v0.5.0
v0.5.1
v0.6.0
v0.6.1
v0.6.2
v0.6.3
v0.7.0
v0.7.1
v0.8.0
v0.8.1
v0.8.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45179.json"