robrwo/Net-Statsd-Tiny

robrwo/Net-Statsd-Tiny

Releases16
Frequency6 months 2 weeks
Last Release
A lightweight statsd client

CVE History

CVEPublishedCVSS v3CVSS v2
8.2 HIGH

Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.