← All advisories

Medium severity6.5NVD Advisory· Published Jun 4, 2026· Updated Jun 8, 2026

CVE-2026-8722

CVE-2026-8722

Description

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections.

The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

Affected products

3

RubyGems/Net Async Statsd Clientinferred
Range: <=0.005
Package: https://rubygems.org/gems/net-async-statsd-client
Team/Net\
cpe:2.3:a:team:net\:\:async\:\:statsd\:\:client:*:*:*:*:*:perl:*:*
Range: <=0.005
Perl Foundation/Net::Async::Statsd::Clientllm-fuzzy
Range: <=0.005

Patches

Vulnerability mechanics

References

2

www.cve.org/CVERecordnvdThird Party Advisory
www.cve.org/CVERecordnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.