threatest

Threatest Threatest is a CLI and Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post:...

security-labs-pocs

Datadog Security Labs Research and Proof of Concept Code This repository contains information, exploits, malware samples, and scripts from Datadog Security Labs. Goal This repository aims at providing proof of concept exploits, malware samples and technical demos to help the community respond to...

stratus-red-team

Stratus Red Team Stratus Red Team is "Atomic Red Team™" for the cloud, providing granular and self-contained emulation of offensive attack techniques. Announcement blog posts: https://www.datadoghq.com/blog/cyber-attack-simulation-with-stratus-red-team/...

CVE-2026-116588 vulnerabilities

Vulnerabilities for packages: datadog-agent...

GHSA-P3M5-H5V9-VQJ6 vulnerabilities

Vulnerabilities for packages: datadog-agent...

GHSA-3633-R77Q-H3V3 vulnerabilities

Vulnerabilities for packages: datadog-agent...

CVE-2026-116589 vulnerabilities

Vulnerabilities for packages: datadog-agent...

CVE-2026-116588 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips...

GHSA-P3M5-H5V9-VQJ6 vulnerabilities

Vulnerabilities for packages: datadog-agent, opal, datadog-agent-fips...

GHSA-3633-R77Q-H3V3 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips...

CVE-2026-116589 vulnerabilities

Vulnerabilities for packages: datadog-agent, opal, datadog-agent-fips...

CVE-2026-114605 vulnerabilities

Vulnerabilities for packages: datadog-agent, py3-cassandra-medusa, superset...

GHSA-45C3-73F7-PV4M vulnerabilities

Vulnerabilities for packages: datadog-agent, py3-cassandra-medusa, superset...

GHSA-3JP2-3MRG-2VXC vulnerabilities

Vulnerabilities for packages: datadog-agent, authentik, authentik-fips, datadog-agent-fips...

CVE-2026-49272 vulnerabilities

Vulnerabilities for packages: datadog-agent, authentik, authentik-fips, datadog-agent-fips...

CVE-2026-49272 vulnerabilities

Vulnerabilities for packages: datadog-agent...

GHSA-3JP2-3MRG-2VXC vulnerabilities

Vulnerabilities for packages: datadog-agent...

Datadog dd-trace-py: ReDoS in URL query string obfuscation

Summary A regular expression used to obfuscate URL query strings can consume excessive CPU when processing certain attacker-controlled input. This can stall request processing and cause denial of service in applications using affected HTTP tracing integrations. Details The default query-string...

EUVD-2026-110469

Datadog dd-trace-py: ReDoS in URL query string obfuscation...

GHSA-3633-R77Q-H3V3 Datadog dd-trace-py: ReDoS in URL query string obfuscation

Summary A regular expression used to obfuscate URL query strings can consume excessive CPU when processing certain attacker-controlled input. This can stall request processing and cause denial of service in applications using affected HTTP tracing integrations. Details The default query-string...