PT-2026-46972

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The send stats method does not remove newlines from metric names $stat variable, allowing attackers to change...