CVE-2026-8722 — Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections

CVE-2026-8722

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections PUBLISHED

Description (CNA)

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

Affected (CNA)

Vendor / product	Versions
TEAM / Net::Async::Statsd::Client	affected 0 through 0.005

CWE

CWE-93, CWE-150

References

https://www.cve.org/CVERecord?id=CVE-2026-46719
https://www.cve.org/CVERecord?id=CVE-2026-46720

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.