https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:55:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-328714 EUVD-2026-328714 https://cve.radiocsirt.org/vuln/euvd-2026-328714 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46740 <p>Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections.</p> <p>The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.</p> <p>Version 0.06 changes the module from being a statsd client to using a separate statsd client. It defaults to using a version of Net::Statsd::Tiny that fixes a similar issue (CVE-2026-46720).</p> <p>Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections.</p> <p>The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.</p> <p>Version 0.06 changes the module from being a statsd client to using a separate statsd client. It defaults to using a version of Net::Statsd::Tiny that fixes a similar issue (CVE-2026-46720).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-46740 https://cve.radiocsirt.org/vuln/ghsa-ffgx-7q59-grgc <p>Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections.</p> <p>The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.</p> <p>Version 0.06 changes the module from being a statsd client to using a separate statsd client. It defaults to using a version of Net::Statsd::Tiny that fixes a similar issue (CVE-2026-46720).</p> <p>Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections.</p> <p>The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.</p> <p>Version 0.06 changes the module from being a statsd client to using a separate statsd client. It defaults to using a version of Net::Statsd::Tiny that fixes a similar issue (CVE-2026-46720).</p> https://cve.radiocsirt.org/vuln/ghsa-ffgx-7q59-grgc