CVE-2026-11362

DataDog::DogStatsd for Perl versions up to 0.07 is vulnerable to metric injections via event tags. The format_event method does not validate tag content, allowing commas, newlines, pipes and colons in tags and enabling injection of metrics from untrusted sources. The pipe was attempted to be stri...