https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:47:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-325626 EUVD-2026-325626 https://cve.radiocsirt.org/vuln/euvd-2026-325626 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9270 <p>DataDog::DogStatsd versions through 0.07 for Perl allow metric injections.</p> <p>DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources.</p> <p>The send_stats method does not remove newlines from metric names ($stat variable), allowing attackers to change the metric name prefix.</p> <p>The send_stats method does not validate the content of the value ($delta variable), allowing attackers to inject metrics, especially from methods that do not restrict the data type for the value, such as set, gauge, count and histogram.</p> <p>The send_stats method does not validate the content of the tags, which may contain newlines, pipes and colons that allow metric injections.</p> <p>Note that the SYNOPSIS shows an example of passing a website form &#34;loginName&#34; parameter as a tag, which is unsafe.</p> <p>DataDog::DogStatsd versions through 0.07 for Perl allow metric injections.</p> <p>DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources.</p> <p>The send_stats method does not remove newlines from metric names ($stat variable), allowing attackers to change the metric name prefix.</p> <p>The send_stats method does not validate the content of the value ($delta variable), allowing attackers to inject metrics, especially from methods that do not restrict the data type for the value, such as set, gauge, count and histogram.</p> <p>The send_stats method does not validate the content of the tags, which may contain newlines, pipes and colons that allow metric injections.</p> <p>Note that the SYNOPSIS shows an example of passing a website form &#34;loginName&#34; parameter as a tag, which is unsafe.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-9270 https://cve.radiocsirt.org/vuln/ghsa-x9rg-6x4w-mpcx <p>DataDog::DogStatsd versions through 0.07 for Perl allow metric injections.</p> <p>DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources.</p> <p>The send_stats method does not remove newlines from metric names ($stat variable), allowing attackers to change the metric name prefix.</p> <p>The send_stats method does not validate the content of the value ($delta variable), allowing attackers to inject metrics, especially from methods that do not restrict the data type for the value, such as set, gauge, count and histogram.</p> <p>The send_stats method does not validate the content of the tags, which may contain newlines, pipes and colons that allow metric injections.</p> <p>Note that the SYNOPSIS shows an example of passing a website form &#34;loginName&#34; parameter as a tag, which is unsafe.</p> <p>DataDog::DogStatsd versions through 0.07 for Perl allow metric injections.</p> <p>DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources.</p> <p>The send_stats method does not remove newlines from metric names ($stat variable), allowing attackers to change the metric name prefix.</p> <p>The send_stats method does not validate the content of the value ($delta variable), allowing attackers to inject metrics, especially from methods that do not restrict the data type for the value, such as set, gauge, count and histogram.</p> <p>The send_stats method does not validate the content of the tags, which may contain newlines, pipes and colons that allow metric injections.</p> <p>Note that the SYNOPSIS shows an example of passing a website form &#34;loginName&#34; parameter as a tag, which is unsafe.</p> https://cve.radiocsirt.org/vuln/ghsa-x9rg-6x4w-mpcx