CVE-2026-9270

The DataDog::DogStatsd Perl module, versions through 0.07 , is vulnerable to metric injections due to insufficient input sanitization. The send_stats method fails to remove newlines from metric names (the $stat variable), enabling attackers to manipulate metric name prefixes. Additionally, it doe...

CVE-2026-9270: Improper Neutralization of CRLF Sequences

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The sendstats method does not remove newlines from metric names $stat variable, allowing attackers to change t...