BaseFortify

Publication date: 2026-05-16

Last updated on: 2026-06-19

Assigner: CPANSec

Description

Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-16

Last Modified

2026-06-19

Generated

2026-06-30

EPSS Evaluated

2026-06-28

NVD

CVE-2026-46719

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-93	The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.
CWE-150	The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as escape, meta, or control character sequences when they are sent to a downstream component.

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2026-46719. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70