PatchSiren

COSIMO CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM COSIMO CVE published 2026-06-04

CVE-2026-46739

CVE-2026-46739 is a MEDIUM severity vulnerability in Net::Statsd versions before 0.13 for Perl. The vulnerability allows metric injections from untrusted sources because metric names are not checked for newlines, colons, or pipes. Additionally, the update_stats (used for updating counters) and gauge methods do not check that values are numeric, which could block metric injection.