security-labs-pocs

Datadog Security Labs Forschung und Proof-of-Concept-Code === Dieses Repository enthält Informationen, Exploits, Malware-Beispiele und Skripte von Datadog Security Labs. Ziel Dieses Repository soll Proof-of-Concept-Exploits, Malware-Beispiele und technische Demos bereitstellen, um der Community z...

GHSA-GPWF-4H98-V82Q datadog-opentelemetry has unbounded W3C tracestate parsing that may lead to DoS

Impact Datadog tracing libraries that implement W3C Trace Context tracecontext propagation parse the incoming tracestate header without enforcing a size cap on the Datadog vendor entry dd=.... The dd= value contains semicolon-separated key:value pairs, and the parser allocates a hash-map entry fo...

EUVD-2026-67829

dd-trace-rs provides Datadog application performance monitoring for Rust. From 0.1.0 until 0.3.3, datadog-opentelemetry/src/propagation/tracecontext.rs parses the W3C tracestate header and collects every semicolon-separated key and value pair in the Datadog dd=... vendor entry into a HashMap...

dirtypipe-container-breakout-poc

Escape de Contêiner Dirty Pipe Movido para https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/dirtypipe-container-breakout...

threatest

Threatest Threatest ist ein CLI und Go-Framework für End-to-End-Tests der Bedrohungserkennung. Threatest ermöglicht es Ihnen, eine Angriffstechnik zu detonieren und zu überprüfen, ob der erwartete Alarm in Ihrer bevorzugten Sicherheitsplattform generiert wurde. Lesen Sie den...

stratus-red-team

Stratus Red Team Stratus Red Team è l'"Atomic Red Team™" per il cloud, che fornisce un'emulazione granulare e autonoma delle tecniche di attacco offensive...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: k8ssandra-client, crossplane, istio, pulumi-kubernetes-operator, telegraf, cluster-api-aws-controller, azure-service-operator, flux-notification-controller, k3s, kube-metrics-adapter, cass-operator, hubble-ui, spicedb, opentelemetry-operator, flux-helm-controller,...

GO-2026-6003 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...

GO-2026-6005 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...

GO-2026-6006 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...

GO-2026-6008 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: ferretdb, jaeger, osv-scanner, datadog-agent, datadog-agent-fips, github-mcp-server, flux-operator, opencost-fips, gitlab-workhorse-ce, flux-operator-fips, gptscript, opencost, gitlab-workhorse-ce-fips, jaeger-fips...

GO-2026-6007 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...

GO-2026-6011 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...

GO-2026-4773 vulnerabilities

Vulnerabilities for packages: livekit-cli, ferretdb, glab, jaeger, osv-scanner, datadog-agent, datadog-agent-fips, flux-operator, opencost-fips, gitlab-workhorse-ce, flux-operator-fips, opencost, gitlab-workhorse-ce-fips, jaeger-fips...

GO-2026-4312 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips...

GO-2026-6009 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: livekit-cli, ferretdb, glab, jaeger, osv-scanner, datadog-agent, datadog-agent-fips, flux-operator, opencost-fips, gitlab-workhorse-ce, flux-operator-fips, opencost, gitlab-workhorse-ce-fips, jaeger-fips...

GO-2026-6000 vulnerabilities

Vulnerabilities for packages: buildkite-agent, eks-distro-fips, vitess, datadog-agent, datadog-agent-fips, traefik-fips, eks-distro, coder, kubernetes-dns-node-cache-fips, coder-fips, traefik, kubernetes-dns-node-cache, buildkite-agent-fips...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: grafana, mattermost, vault-fips, beats-fips, frankenphp-8.5, loki, zot, frankenphp-8.3, consul-fips, rke2-runtime, vault, grafana-fips, datadog-agent-fips, commercial-grafana, k3s, elastic-agent-fips, rke2-runtime-fips, frankenphp-8.4, mattermost-fips, consul,...