/ 
Net-Async-Statsd-0.005
/ Net::Async::Statsd
Security Advisories (1)
CVE-2026-8722 (2026-06-03)

Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections. The metric names are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

NAME

Net::Async::Statsd - asynchronous API for Etsy's statsd protocol

VERSION

version 0.004

SYNOPSIS

use Future;
use IO::Async::Loop;
use Net::Async::Statsd::Client;
my $loop = IO::Async::Loop->new;
$loop->add(my $statsd = Net::Async::Statsd::Client->new(
  host => 'localhost',
  port => 3001,
));
Future->needs_all(
 $statsd->timing(
  'some.task' => 133,
 ),
 $statsd->gauge(
  'some.value' => 80,
 )
)->get;

DESCRIPTION

Provides an asynchronous API for statsd.

You probably wanted the client implementation - see Net::Async::Statsd::Client. There's a basic server implementation in Net::Async::Statsd::Server, note that this does little more than accept traffic and raise events.

If you're not using IO::Async, this module is probably not what you wanted. See Net::Statsd instead.

SEE ALSO

AUTHOR

Tom Molesworth <TEAM@cpan.org>

LICENSE

Copyright Tom Molesworth 2014-2016. Licensed under the same terms as Perl itself.