CVE-2026-50271

CVE-2026-50271 affects the Datadog dd-trace-py Python APM client (prior to 4.8.2). The issue is improper parsing of W3C baggage headers, failing to enforce DD_TRACE_BAGGAGE_MAX_ITEMS/MAX_BYTES on the extract path. A remote, unauthenticated attacker can send baggage headers with an arbitrarily lar...

CVE-2026-50274

Datadog dd-trace-go (Go client library for Datadog APM/ profiling/ security monitoring) is affected prior to version 2.8.1 due to improper enforcement of DD_TRACE_BAGGAGE_MAX_ITEMS/MAX_BYTES on the baggage header extract path. A remote, unauthenticated attacker can send HTTP requests with an exce...

CVE-2026-50273

Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES on extraction, allowing a remote...

CVE-2026-50273 Datadog .NET Tracer: Improper parsing of W3C baggage headers may lead to DoS

Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES on extraction, allowing a remote...

EUVD-2026-45243

Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES on extraction, allowing a remote...

CVE-2026-50273

Datadog .NET Tracer (dd-trace-dotnet) is affected prior to version 3.43.0 by CVE-2026-50273 due to improper parsing of W3C baggage headers. The extraction path does not enforce DD_TRACE_BAGGAGE_MAX_ITEMS or DD_TRACE_BAGGAGE_MAX_BYTES, allowing a remote unauthenticated attacker to send a header wi...

CVE-2026-50273 Datadog .NET Tracer: Improper parsing of W3C baggage headers may lead to DoS

Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES on extraction, allowing a remote...

GHSA-22XC-XG2R-9J7V vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...

CVE-2026-53719 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...

GHSA-H7PQ-86H8-RP5X vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...

GHSA-FCRP-7GC2-93G7 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...

GHSA-M2V6-2JMH-4C68 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...

GHSA-WCRF-9VRR-854F vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...

CVE-2026-53717 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...

CVE-2026-53718 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...

CVE-2026-53715 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...

CVE-2026-53713 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...

CVE-2026-53716 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...

CVE-2026-53714 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...

GHSA-CXPQ-8V7Q-CG56 vulnerabilities

Vulnerabilities for packages: tigera-operator-fips, gitlab-operator, gitlab-operator-fips, tigera-operator, datadog-agent-fips, datadog-agent...