CVE-2026-11373

The Net::Statsite::Client Perl library, which serves as a client for the statsite protocol (a variant of statsd), is vulnerable to metric injections in versions through 1.1.0 . The root cause is the failure to remove newlines from metric names and the lack of sanitization for newlines or other pr...