CVE-2026-50637

Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol and extensions allow mutiple metrics,separated by newlines, to be sent per packet. The send method does not validate the contents of the metric names or values. If the names...

EUVD-2026-36106

Metrics::Any::Adapter::SignalFx versions before 0.04 for Perl does not protect against metric injections. The statsd protocol and extensions such as dogstatsd allow mutiple metrics,separated by newlines, to be sent per packet. Metrics::Any::Adapter::SignalFx which extends...

CVE-2026-50637

Summary: Metrics::Any::Adapter::Statsd (Perl) versions before 0.04 are vulnerable to metric injections because the send path does not validate metric names/values containing newlines and statsd control characters (colon, pipe). Version 0.04 fixes this by blocking characters below ASCII 32 (includ...