Etsy vulnerabilities

1 known vulnerability in Etsy from Sanbeg. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Etsy::StatsD: Improper Neutralization of CRLF Sequences

  CVE-2026-46741Jun 4, 2026Sanbeg

  Etsy::StatsD versions through 1.002002 for Perl allow metric injections. The metric names and values are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that the git repository co