CVE-2026-50639

The Metrics::Any::Adapter::SignalFx Perl module (versions before 0.04 ) is vulnerable to metric injections . This vulnerability stems from the _labels function failing to validate tags for newlines or statsd control characters (such as colons or pipes). Because the statsd protocol allows multiple...

CVE-2024-11734 Org.keycloak:keycloak-quarkus-server: denial of service in keycloak server via security headers

A denial of service vulnerability was found in Keycloak that could allow an administrative user with the right to change realm settings to disrupt the service. This action is done by modifying any of the security headers and inserting newlines, which causes the Keycloak server to write to a reque...