549 matches found
EUVD-2026-77670
dd-trace-java is a Datadog APM client for Java. Prior to 1.62.0, W3C baggage extraction does not enforce DDTRACEBAGGAGEMAXITEMS, which defaults to 64, or DDTRACEBAGGAGEMAXBYTES, which defaults to 8192, although those limits apply during baggage injection. A remote unauthenticated attacker can sen...
CVE-2026-50270
dd-trace-java (Datadog APM client for Java) versions prior to 1.62.0 are vulnerable to a remote Denial of Service due to improper parsing of W3C baggage headers. The extraction path in BaggagePropagator.java allocates a hash-map entry for each comma-separated key-value pair without enforcing DD_T...
GHSA-7JXH-36Q5-GCQV vulnerabilities
Vulnerabilities for packages: kubescape-server-fips, grype-fips, neuvector, consul-k8s, k8ssandra-client, kube-mgmt, syft, skaffold, rancher-agent, kubescape, google-osconfig-agent, spegel-fips, tigera-operator-fips, kaniko, cloudbeat, docker-compose-fips, chartmuseum, kubevela-fips,...
CVE-2026-53495 vulnerabilities
Vulnerabilities for packages: kubescape-server-fips, grype-fips, neuvector, consul-k8s, k8ssandra-client, kube-mgmt, syft, skaffold, rancher-agent, kubescape, google-osconfig-agent, spegel-fips, tigera-operator-fips, kaniko, cloudbeat, docker-compose-fips, chartmuseum, kubevela-fips,...
GHSA-5CC2-282F-JJQ2 vulnerabilities
Vulnerabilities for packages: datadog-agent...
CVE-2026-15925 vulnerabilities
Vulnerabilities for packages: datadog-agent...
GHSA-5CC2-282F-JJQ2 vulnerabilities
Vulnerabilities for packages: keep-fips, airflow, mlrun, keep, mlrun-fips, datadog-agent-fips, datadog-agent...
CVE-2026-15925 vulnerabilities
Vulnerabilities for packages: keep-fips, airflow, mlrun, keep, mlrun-fips, datadog-agent-fips, datadog-agent...
GHSA-GPWF-4H98-V82Q datadog-opentelemetry has unbounded W3C tracestate parsing that may lead to DoS
Impact Datadog tracing libraries that implement W3C Trace Context tracecontext propagation parse the incoming tracestate header without enforcing a size cap on the Datadog vendor entry dd=.... The dd= value contains semicolon-separated key:value pairs, and the parser allocates a hash-map entry fo...
EUVD-2026-67829
dd-trace-rs provides Datadog application performance monitoring for Rust. From 0.1.0 until 0.3.3, datadog-opentelemetry/src/propagation/tracecontext.rs parses the W3C tracestate header and collects every semicolon-separated key and value pair in the Datadog dd=... vendor entry into a HashMap...
PT-2026-83230
dd-trace-rs provides Datadog application performance monitoring for Rust. From 0.1.0 until 0.3.3, datadog-opentelemetry/src/propagation/tracecontext.rs parses the W3C tracestate header and collects every semicolon-separated key and value pair in the Datadog dd=... vendor entry into a HashMap...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: yunikorn-k8shim, cluster-autoscaler, flux-kustomize-controller, datadog-operator, rancher-agent, cert-manager-istio-csr, tekton-chains, emissary, spqr, metrics-server, openfga, cloud-provider-gcp-cloud-controller-manager, flux-helm-controller, kubernetes,...
GO-2026-6003 vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent-fips, tigera-operator-fips, gitlab-operator, gitlab-operator-fips, datadog-agent...
GO-2026-6008 vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent-fips, tigera-operator-fips, gitlab-operator, gitlab-operator-fips, datadog-agent...
GO-2026-6005 vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent-fips, tigera-operator-fips, gitlab-operator, gitlab-operator-fips, datadog-agent...
GO-2026-6006 vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent-fips, tigera-operator-fips, gitlab-operator, gitlab-operator-fips, datadog-agent...
GO-2026-4569 vulnerabilities
Vulnerabilities for packages: jaeger, opencost-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, opencost, flux-operator-fips, datadog-agent-fips, github-mcp-server, ferretdb, jaeger-fips, gptscript, flux-operator, datadog-agent, osv-scanner...
GO-2026-4770 vulnerabilities
Vulnerabilities for packages: opencost-fips, gitlab-workhorse-ce-fips, gitlab-workhorse-ce, glab, livekit-cli, opencost, flux-operator-fips, datadog-agent-fips, ferretdb, jaeger-fips, jaeger, flux-operator, datadog-agent, osv-scanner...