Threats affecting pkg:github/Net-Statsd-Lite

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.3	EPSS 0.2%	CVE-2026-8788RRWO Net::Statsd::Lite · CRLF Injection High7.3EPSS 0.2%2026-05-18CVE Database V5CVE-2026-8788 Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. The values from the set_add method were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that version 0.9.0 fixed a similar issue CVE-2026-46719 for metric names. EPSS 0.2%Vulnerability CWE-93	CVE Database V5	2026-05-18
Medium	6.5	EPSS 0.3%	CVE-2026-46719RRWO Net::Statsd::Lite · CRLF Injection Medium6.5EPSS 0.3%2026-05-16CVE Database V5CVE-2026-46719 Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. EPSS 0.3%Vulnerability CWE-93	CVE Database V5	2026-05-16

Page 1 of 1