CVE-2026-46719

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-46719

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46719.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-46719

Published

2026-05-16T13:37:22Z

Modified

2026-08-12T03:51:21.428470932Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS Calculator

Summary

Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections

Details

Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections.

The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

Database specific

{
    "cna_assigner": "CPANSec",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46719.json",
    "cwe_ids": [
        "CWE-150",
        "CWE-93"
    ]
}

References

Affected packages

Git / github.com/robrwo/net-statsd-lite

Affected ranges

Type

GIT

Repo

https://github.com/robrwo/net-statsd-lite

Events

Introduced

Fixed

efeaaafb65557005e6ecf7fac4b1f251db581d43

Fixed

e1a8ab866d75c2827982134e9cf7e51a7f771153

Database specific

Show details

{
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.9.0"
        }
    ]
}

Affected versions

v0.*

v0.1.0

v0.1.1

v0.2.0

v0.2.1

v0.3.0

v0.3.1

v0.4.0

v0.4.1

v0.4.10

v0.4.2

v0.4.3

v0.4.4

v0.4.5

v0.4.6

v0.4.7

v0.4.8

v0.4.9

v0.5.0

v0.5.1

v0.5.2

v0.6.0

v0.6.1

v0.6.2

v0.6.3

v0.7.0

v0.7.1

v0.8.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46719.json"