CVE-2026-50638

CVE-2026-50638 affects Metrics::Any::Adapter::DogStatsd for Perl, specifically versions before 0.04. The vulnerability arises because metrics can be injected via newline-separated payloads and the _tags function does not validate newlines or StatsD control characters, enabling metric injections. ...