ByteOS Network

NVD Vulnerability Details :

CVE-2026-46720

Deferred

Source-9b29abf9-4ab0-4765-b253-1875cd9b441e

Published At-17 May, 2026 | 18:16

Updated At-18 May, 2026 | 17:40

Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Type: Secondary

Version: 3.1

Base score: 8.2

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Weaknesses

CWE ID	Type	Source
CWE-93	Secondary	9b29abf9-4ab0-4765-b253-1875cd9b441e

CWE ID: CWE-93

Type: Secondary

Source: 9b29abf9-4ab0-4765-b253-1875cd9b441e

References

Hyperlink	Source	Resource
https://github.com/robrwo/Net-Statsd-Tiny/commit/06f814f52fbcc0b2afddf7a2d6f8137fd3cede13.patch	9b29abf9-4ab0-4765-b253-1875cd9b441e	N/A
https://metacpan.org/release/RRWO/Net-Statsd-Tiny-v0.3.8/changes	9b29abf9-4ab0-4765-b253-1875cd9b441e	N/A
https://www.cve.org/CVERecord?id=CVE-2026-46719	9b29abf9-4ab0-4765-b253-1875cd9b441e	N/A