VYPR

Net::Statsite::Client

by Perl Foundation

CVEs (1)

  • CVE-2026-11373CriJun 22, 2026
    risk 0.00cvss 9.1epss 0.01

    Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections. Net::Statsite::Client is a client for the statsite protocol, which is a variant of statsd. Newlines are not removed from metric names, allowing metric injections. Values are not sanitised for…