https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:23:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-328716 EUVD-2026-328716 https://cve.radiocsirt.org/vuln/euvd-2026-328716 https://cve.radiocsirt.org/vuln/fkie_cve-2026-50637 <p>Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections.</p> <p>The statsd protocol (and extensions) allow mutiple metrics, separated by newlines, to be sent per packet.</p> <p>The send method does not validate the contents of the metric names or values. If the names have newlines and statsd control characters (colon, pipe) then metric injections are possible.</p> <p>Version 0.04 fixed this by modifying the _make method to block metric names with characters below ASCII 32 (which includes the newline), or colons or pipes.</p> <p>Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections.</p> <p>The statsd protocol (and extensions) allow mutiple metrics, separated by newlines, to be sent per packet.</p> <p>The send method does not validate the contents of the metric names or values. If the names have newlines and statsd control characters (colon, pipe) then metric injections are possible.</p> <p>Version 0.04 fixed this by modifying the _make method to block metric names with characters below ASCII 32 (which includes the newline), or colons or pipes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-50637 https://cve.radiocsirt.org/vuln/ghsa-q83q-ghhm-p7g4 <p>Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections.</p> <p>The statsd protocol (and extensions) allow mutiple metrics,separated by newlines, to be sent per packet.</p> <p>The send method does not validate the contents of the metric names or values. If the names have newlines and statsd control characters (colon, pipe) then metric injections are possible.</p> <p>Version 0.04 fixed this by modifying the _make method to block metric names with characters below ASCII 32 (which includes the newline), or colons or pipes.</p> <p>Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections.</p> <p>The statsd protocol (and extensions) allow mutiple metrics,separated by newlines, to be sent per packet.</p> <p>The send method does not validate the contents of the metric names or values. If the names have newlines and statsd control characters (colon, pipe) then metric injections are possible.</p> <p>Version 0.04 fixed this by modifying the _make method to block metric names with characters below ASCII 32 (which includes the newline), or colons or pipes.</p> https://cve.radiocsirt.org/vuln/ghsa-q83q-ghhm-p7g4