CVE-2026-9270

The DataDog::DogStatsd Perl module, versions through 0.07 , is vulnerable to metric injections due to insufficient input sanitization. The send_stats method fails to remove newlines from metric names (the $stat variable), enabling attackers to manipulate metric name prefixes. Additionally, it doe...

CVE-2026-11362

DataDog::DogStatsd versions prior to 0.08 for Perl are vulnerable to metric injections due to improper input sanitization. The format_event method (called by the event method) fails to validate the content of tags, allowing untrusted sources to inject data using commas , newlines , pipes , and co...