PT-2026-41581 · Cpan · Net::Statsd::Tiny

Published 2026-05-17 · Updated 2026-05-27 · CVE-2026-46720

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Net::Statsd::Tiny versions prior to 0.3.8

Description Net::Statsd::Tiny for Perl allows metric injections because metric names and set values are not validated for newlines, colons, or pipes. This allows metrics generated from untrusted sources to inject additional statsd metrics.

Recommendations Update to version 0.3.8 or later.

Fix

Weakness Enumeration

CWE-93

Related Identifiers

CVE-2026-46720

Affected Products

Net::Statsd::Tiny

References · 9

• https://github.com/robrwo/Net-Statsd-Tiny/commit/06f814f52fbcc0b2afddf7a2d6f8137fd3cede13.patch · Patch
• https://cve.org/CVERecord?id=CVE-2026-46719 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-46720 · Security Note
• https://t.me/CVEtracker/55044 · Telegram Post
• https://t.me/CVEtracker/54072 · Telegram Post
• https://metacpan.org/release/RRWO/Net-Statsd-Tiny-v0.3.8/changes · Note
• https://t.me/cveNotify/163789 · Telegram Post
• https://twitter.com/oss_security/status/2056947352804438157 · Twitter Post
• https://twitter.com/CVEnew/status/2056253266124542172 · Twitter Post