Pevans vulnerabilities
We track 3 vulnerabilities in Pevans products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 15, 2026.
Latest Pevans vulnerabilities
- 9.1 Critical severity
Socket: Out-of-bounds Read
Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argume
- 9.1 Critical severity
Metrics::Any::Adapter::DogStatsd: Improper Neutralization of CRLF Sequences
Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions such as dogstatsd) allow mutiple metrics, separated by newlines, to be sent per packet. Metrics::Any::Adapter::DogSta
- 8.2 High severity
Metrics::Any::Adapter::Statsd: Improper Neutralization of CRLF Sequences
Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions) allow mutiple metrics, separated by newlines, to be sent per packet. The send method does not validate the contents of