Skip to content
OpenAdvisories

Vendor

BINARY

2 known vulnerabilities.

2 results · Feed

  • Critical 9.8

    DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags

    DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The format_event method (used by the event method) does …

  • Critical 9.1

    DataDog::DogStatsd versions through 0.07 for Perl allow metric injections

    DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The send_stats method does not remove newlines from metric names ($stat …