CVE-2026-8788

Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the setadd method were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that version 0.9.0 fixed a similar issue...

CVE-2026-8788

CVE-2026-8788 affects Net::Statsd::Lite up to version 0.10.0 on Perl. The issue arises because values passed to the set_add method are not validated for newlines, colons, or pipes, allowing untrusted sources to inject additional metrics. Multiple connected sources confirm the same description acr...

Net::Statsd::Lite 注入漏洞

Net::Statsd::Lite is a lightweight StatsD client developed by Robert Rothenberg, which supports multiple metric data packets. Versions of Net::Statsd::Lite prior to 0.10.0 have a vulnerability due to the setadd method not checking for line breaks, colons, or pipes, which may lead to metric...