CVE-2026-9270

creationtimestamp| type| source ---|---|--- 2026-06-05 17:03:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkmmt2ikd2g 2026-06-06 03:42:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnlqbomqr22m...

CVE-2026-9270

DataDog::DogStatsd for Perl (up to version 0.07) is vulnerable to metric injections due to insufficient input sanitization in the send_stats pathway. The stat name is not stripped of newlines, enabling prefix manipulation; the value (delta) is not validated, allowing injection via set/gauge/count...