Skip to content
OpenAdvisories

Vendor

RRWO

20 known vulnerabilities.

Products

Net::CIDR::Set 5 Crypt::SaltedHash 2 Net::Statsd::Lite 2 Plack::App::Prerender 1 Linux::Statm::Tiny 1 Plack::Middleware::Security::Common 1 Catalyst::View::Wkhtmltopdf 1 Catalyst::Plugin::Statsd 1 Text::Minify::XS 1 Mojolicious::Plugin::Statsd 1 Data::Entropy 1 File::Rotate::Simple 1 Net::Statsd::Tiny 1 Plack::Middleware::Statsd 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-49940

    Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks

    Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks. Unicode digits such as the Arabic-Indic One (U+0661) were accepted but not properly parsed as numbers. This could allow network masks to accept larger networks.

    RRWO Net::CIDR::Set libnet-cidr-set-perl libnet-cidr-set-perl Debian Ubuntu
  • Medium 5.3
    CVE-2026-46740

    Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections

    Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Version 0.06…

    RRWO Mojolicious::Plugin::Statsd
  • Medium 6.5
    CVE-2026-46719

    Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections

    Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

    RRWO Net::Statsd::Lite
  • Medium 5.3
    CVE-2026-45179

    Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses

    Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses. If the communication channel to the statsd daemon is not secured (for example, by sending UDP packets to a host on another network), then users' IP addresses may be leaked. S…

    RRWO Plack::Middleware::Statsd
  • Medium 6.5
    CVE-2025-40911

    Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses

    Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal number…

    RRWO Net::CIDR::Set libnet-cidr-set-perl libnet-cidr-set-perl Debian Ubuntu
  • Medium 6.5
    CVE-2025-3051

    Linux::Statm::Tiny for Perl allows untrusted code to be included from the current working directory

    Linux::Statm::Tiny for Perl before 0.0701 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended fi…

    RRWO Linux::Statm::Tiny Linux