Metrics
6 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Metrics, a product in the devtools ci space. Use it to gauge the current risk picture and drill into individual advisories.
Metrics CVEs per month
| Month | CVEs |
|---|---|
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 3 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
| 2026-10 | 0 |
Severity
How the 6 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High1
- Medium4
Latest CVEs
The 6 most recently published vulnerabilities affecting Metrics.
- CVE-2026-50639Metrics::Any::Adapter::SignalFx versions before 0.04 for Perl does not protect against metric injections6.5
- CVE-2026-50638Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections9.1
- CVE-2026-50637Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect against metric injections8.2
- CVE-2022-4860KBase Metrics methods_upload_user_stats.py upload_user_data sql injection5.5
- CVE-2022-20621Jenkins Metrics Plugin 4.0.2.8 and earlier stores an access key unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins con...5.5
- CVE-2003-0202The (1) halstead and (2) gather_stats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.4.6
Product grouping is registry-driven, with AI assist and human review. How it works