DataDog::DogStatsd vulnerabilities

2 known vulnerabilities in DataDog::DogStatsd from Binary. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  DataDog::DogStatsd: Improper Neutralization of CRLF Sequences

  CVE-2026-9270Jun 5, 2026Binary

  DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The send_stats method does not remove newlines from metric names ($stat v

• 9.8 Critical severity

  DataDog::DogStatsd: Improper Neutralization of CRLF Sequences

  CVE-2026-11362Jun 5, 2026Binary

  DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The format_event method (used by the event method) does n