ROOT-APP-PYPI-CVE-2026-50271 CVE-2026-50271 in ddtrace - Patched by Root

Root has patched CVE-2026-50271 in the ddtrace package for Root:PyPI. Multiple fixed versions available...

CLEANSTART-2026-PU95946 Security fixes in litellm-database 1.91.1-r0

Package litellm-database version 1.91.1-r0 fixes 1 vulnerabilities: CVE-2026-50271...

CLEANSTART-2026-JX06372 Security fixes in litellm-database 1.90.4-r0

Package litellm-database version 1.90.4-r0 fixes 1 vulnerabilities: CVE-2026-50271...

CLEANSTART-2026-PS13289 Security fixes in litellm-database 1.91.3-r0

Package litellm-database version 1.91.3-r0 fixes 1 vulnerabilities: CVE-2026-50271...

pyshuttlis (0.1.53), shuttlis (0.1.53) potentially affected by CVE-2026-50271 via ddtrace (0.36.1)

ddtrace PYPI version 0.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - pyshuttlis 0.1.53 - shuttlis 0.1.53 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

spellbot (>=7.10.11, <=7.12.2) potentially affected by CVE-2026-50271 via ddtrace (0.57.4)

ddtrace PYPI version 0.57.4 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - spellbot =7.10.11, =7.12.2 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (>=3.0.0, <=3.0.1) potentially affected by CVE-2026-50271 via ddtrace (1.7.2)

ddtrace PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos =3.0.0, =3.0.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (>=3.1.0, <=3.1.2) potentially affected by CVE-2026-50271 via ddtrace (1.8.0)

ddtrace PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos =3.1.0, =3.1.2 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=4.77.0, <=4.80.0) potentially affected by CVE-2026-50271 via ddtrace (1.15.2)

ddtrace PYPI version 1.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =4.77.0, =4.80.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

chattr-config (>=0.1.0, <=0.1.1), chattr-event-bus (0.1.0) +8 more potentially affected by CVE-2026-50271 via ddtrace (1.20.19)

ddtrace PYPI version 1.20.19 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - chattr-config =0.1.0, =4.61.0, =1.8.3, =0.1.1, =0.2.0, =1.1.21, =8.0.1, =0.0.1, =0.0.23 Source cves: CVE-2026-50271 Source advisory:...

datadog-lambda (>=4.81.0, <=4.82.0) potentially affected by CVE-2026-50271 via ddtrace (2.0.0rc2)

ddtrace PYPI version 2.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =4.81.0, =4.82.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

chalkdf (>=1.3.4, <=3.34.2), chalkpy (>=2.72.8, <=2.81.3) +9 more potentially affected by CVE-2026-50271 via ddtrace (2.21.12)

ddtrace PYPI version 2.21.12 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - chalkdf =1.3.4, =2.72.8, =1.17.0, =0.7.5, =0.7.5, =0.7.5, =0.1.53, =9.3.0, =4.2.0, =5.1.0 Source cves: CVE-2026-50271 Source advisory:...

blackfire-conprof (>=1.2.4, <=1.2.5) potentially affected by CVE-2026-50271 via ddtrace (3.2.1)

ddtrace PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - blackfire-conprof =1.2.4, =1.2.5 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

troncos (>=6.1.0, <=6.1.1) potentially affected by CVE-2026-50271 via ddtrace (3.9.4)

ddtrace PYPI version 3.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - troncos =6.1.0, =6.1.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

safe-init (>=0.1.0, <=1.0.0) potentially affected by CVE-2026-50271 via ddtrace (2.7.4)

ddtrace PYPI version 2.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - safe-init =0.1.0, =1.0.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

firefighter-incident (>=0.0.1rc1, <=0.0.38) potentially affected by CVE-2026-50271 via ddtrace (2.3.5)

ddtrace PYPI version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - firefighter-incident =0.0.1rc1, =0.0.38 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

CVE-2026-50271 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, datadog-agent, litellm, opal...

CVE-2026-50271

creationtimestamp| type| source ---|---|--- 2026-07-17 22:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mquqsxhwxz2l...

aio-pika-rpc (>=1.0.0, <=1.1.0), aioradio (>=0.13.14, <=0.14.4) +53 more potentially affected by CVE-2026-50271 via ddtrace (>=0.14.1, <=4.6.4)

ddtrace PYPI version =0.14.1, =1.0.0, =0.13.14, =3.4.0.dev202412051939, =2.11.0.dev202411212104, =5.14.0.dev202506051219, =2.3.0rc1, =2.1.0rc1, =0.1.2, =1.3.4, =2.72.8, =0.1.0, =25.0.0, =0.10.0, =8.121.0 and more Source cves: CVE-2026-50271 Source advisory: MEND:CVE-2026-50271...

aioradio (>=0.14.3, <=0.14.4) potentially affected by CVE-2026-50271 via ddtrace (0.50.3)

ddtrace PYPI version 0.50.3 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aioradio =0.14.3, =0.14.4 Source cves: CVE-2026-50271 Source advisory: OSV:GHSA-MW54-J2V2-42HR...