/ 
Mojolicious-Plugin-Statsd-0.04
/ Mojolicious::Plugin::Statsd::Adapter::Memory
Security Advisories (1)
CVE-2026-46740 (2026-05-26)

Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Version 0.06 changes the module from being a statsd client to using a separate statsd client. It defaults to using a version of Net::Statsd::Tiny that fixes a similar issue (CVE-2026-46720).

NAME

Mojolicious::Plugin::Statsd::Adapter::Memory - In-Memory stat recording

DESCRIPTION

This adapter for Mojolicious::Plugin::Statsd keeps all recorded stats in its "stats" attribute and does nothing else. It's useful for testing.

INHERITANCE

Mojolicious::Plugin::Statsd::Adapter::Memory is a Mojo::Base

ATTRIBUTES

stats

A hashref with a key per stat name recorded. Currently, counters are scalar values and timings are hashrefs with 'samples', 'avg, 'min', 'max' keys. This isn't meant to keep reliable metrics right now.

METHODS

timing

See "timing" in Mojolicious::Plugin::Statsd.

counter

See "counter" in Mojolicious::Plugin::Statsd.