CVE-2026-8722 - Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections

Back Back to CVE browser

MEDIUM

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections

Published Jun 3, 2026

6.5

MEDIUM

CVSS 3.1

EPSS 0.31%

Description

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections.

The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

Affected products

Vendor TEAM Product Net::Async::Statsd::Client Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=0.005

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

TEAM

Net::Async::Statsd::Client

unaffected

Version	Status	Constraints
0	affected	<=0.005

Remediation

Vendor solution

Ensure only trusted data is submitted to metrics.

Weaknesses (2)

CWE-150

CWE-93

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34188
Advisory
https://www.cve.org/CVERecord?id=CVE-2026-46719
relatedThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-46720
relatedThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34188		Advisory
https://www.cve.org/CVERecord?id=CVE-2026-46719		relatedThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-46720		relatedThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner CPANSec

Published Jun 3, 2026

Updated Jun 19, 2026

Reserved May 16, 2026

Link CVE-2026-8722

CISA Vulnrichment

Updated Jun 4, 2026

NVD

Status Modified

Modified Jul 22, 2026

Link CVE-2026-8722

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-8722

ENISA EUVD

Assigner CPANSec

Published Jun 3, 2026

Updated Jun 19, 2026

Exploited since n/a

Link EUVD-2026-34188

EUVD-2026-34188