CVE-2026-11362 DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The formatevent method used by the event method does not validate the content of the tags, whi...

CVE-2026-11362

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The formatevent method used by the event method does not validate the content of the tags, whi...

CVE-2026-11362 DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The formatevent method used by the event method does not validate the content of the tags, whi...

CVE-2026-9270

The DataDog::DogStatsd Perl module, versions through 0.07 , is vulnerable to metric injections due to insufficient input sanitization. The send_stats method fails to remove newlines from metric names (the $stat variable), enabling attackers to manipulate metric name prefixes. Additionally, it doe...

CVE-2026-9270

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The sendstats method does not remove newlines from metric names $stat variable, allowing attackers to change t...

CVE-2026-9270 DataDog::DogStatsd versions through 0.07 for Perl allow metric injections

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The sendstats method does not remove newlines from metric names $stat variable, allowing attackers to change t...

PT-2026-46969

Name of the Vulnerable Software and Affected Versions DataDog::DogStatsd versions prior to 0.08 Description DataDog::DogStatsd does not properly sanitize input, which allows metric injections from untrusted sources. The format event method, utilized by the event method, fails to validate tag...

DataDog::DogStatsd security vulnerability

DataDog::DogStatsD is a Perl monitoring client library developed by DataDog Corporation that supports the DogStatsD protocol. Versions of DataDog::DogStatsD prior to 0.07 contained security vulnerabilities; these vulnerabilities stemmed from improper handling of inputs, allowing for the injection...

DataDog::DogStatsd security vulnerability

DataDog::DogStatsd is a Perl monitoring client library developed by DataDog Corporation that supports the DogStatsD protocol. Versions of DataDog::DogStatsd prior to 0.07 contained security vulnerabilities. These vulnerabilities stemmed from improper handling of inputs, the sendstats method not...

CVE-2026-11362: Improper Neutralization of CRLF Sequences

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The formatevent method used by the event method does not validate the content of the tags, whi...

CVE-2026-9270: Improper Neutralization of CRLF Sequences

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The sendstats method does not remove newlines from metric names $stat variable, allowing attackers to change t...

Malicious code in cdktn-provider-datadog (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce930466b101c48ae641d7e4ad57f3d5169b9f14b1e041e4264e75cbfd965b Package name cdktn-provider-datadog is a single-character variant f→n of HashiCorp's widely-used cdktf-provider-datadog CDKTF provider. README and...

MAL-2026-4824 Malicious code in cdktn-provider-datadog (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce930466b101c48ae641d7e4ad57f3d5169b9f14b1e041e4264e75cbfd965b Package name cdktn-provider-datadog is a single-character variant f→n of HashiCorp's widely-used cdktf-provider-datadog CDKTF provider. README and...

CVE-2026-44432 vulnerabilities

Vulnerabilities for packages: confluent-docker-utils, py3-cassandra-medusa, keep, wazuh-manager, authentik-fips, datadog-agent, text-generation-inference, pgadmin4-fips, dbt-core, airflow-core, pypy-3.11, tensorflow-cpu-jupyter, kubeflow-pipelines-visualization-server,...

GHSA-QCCP-GFCP-XXVC vulnerabilities

Vulnerabilities for packages: confluent-docker-utils, py3-cassandra-medusa, keep, wazuh-manager, authentik-fips, datadog-agent, py3.9-pip, text-generation-inference, pgadmin4-fips, dbt-core, airflow-core, pypy-3.11, tensorflow-cpu-jupyter, kubeflow-pipelines-visualization-server,...

CVE-2026-44431 vulnerabilities

Vulnerabilities for packages: confluent-docker-utils, py3-cassandra-medusa, keep, wazuh-manager, authentik-fips, datadog-agent, py3.9-pip, text-generation-inference, pgadmin4-fips, dbt-core, airflow-core, pypy-3.11, tensorflow-cpu-jupyter, kubeflow-pipelines-visualization-server,...

GHSA-MF9V-MFXR-J63J vulnerabilities

Vulnerabilities for packages: confluent-docker-utils, py3-cassandra-medusa, keep, wazuh-manager, authentik-fips, datadog-agent, text-generation-inference, pgadmin4-fips, dbt-core, airflow-core, pypy-3.11, tensorflow-cpu-jupyter, kubeflow-pipelines-visualization-server,...

CVE-2026-44405 vulnerabilities

Vulnerabilities for packages: datadog-agent, az, airflow, superset, py3-paramiko...

GHSA-R374-RXX8-8654 vulnerabilities

Vulnerabilities for packages: datadog-agent, az, airflow, superset, py3-paramiko...

CVE-2026-44405 vulnerabilities

Vulnerabilities for packages: keep, pgadmin4, datadog-agent-fips, az, keep-fips, authentik-fips, authentik, superset-fips, airflow, superset, nemo, py3-paramiko, datadog-agent, duplicity, openstack-nova-2026.1...