CVE-2026-8722

The Net::Async::Statsd::Client library for Perl is vulnerable to metric injection in versions through 0.005 (or prior to 0.006). The root cause is the lack of validation for newlines, colons, or pipes within metric names. This oversight allows an attacker to inject additional statsd metrics when ...