What is CVE-2026-46741?

CVE-2026-46741 is a high-severity vulnerability in Sanbeg Etsy\, classified under CRLF Injection. CVSS score: 7.5/10. Published 2026-06-04.

How severe is CVE-2026-46741?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Sanbeg Etsy\

CVE-2026-46741

Etsy::StatsD versions through 1.002002 for Perl allow metric injections. The metric names and values are not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Note that the git repository contains an unreleased version with the gauge and set methods that also do not check for potential metric injections.

Vulnerability class: CRLF Injection

EPSS: 0.003 (17.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Weakness classification (CWE)

References

9b29abf9-4ab0-4765-b253-1875cd9b441e (related, Third Party Advisory)
9b29abf9-4ab0-4765-b253-1875cd9b441e (related, Third Party Advisory)

Frequently asked questions

What is CVE-2026-46741?: CVE-2026-46741 is a high-severity vulnerability in Sanbeg Etsy\, classified under CRLF Injection. CVSS score: 7.5/10. Published 2026-06-04.
How severe is CVE-2026-46741?: High severity. CVSS v3 base score is 7.5 out of 10.