Metrics vulnerabilities

2 known vulnerabilities in Metrics from Pevans. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Metrics::Any::Adapter::DogStatsd: Improper Neutralization of CRLF Sequences

  CVE-2026-50638Jun 10, 2026Pevans

  Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions such as dogstatsd) allow mutiple metrics, separated by newlines, to be sent per packet. Metrics::Any::Adapter::DogSta

• 8.2 High severity

  Metrics::Any::Adapter::Statsd: Improper Neutralization of CRLF Sequences

  CVE-2026-50637Jun 10, 2026Pevans

  Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections. The statsd protocol (and extensions) allow mutiple metrics, separated by newlines, to be sent per packet. The send method does not validate the contents of