DataDog::DogStatsd 安全漏洞

DataDog::DogStatsD is a Perl monitoring client library developed by DataDog Corporation that supports the DogStatsD protocol. Versions of DataDog::DogStatsD prior to 0.07 contained security vulnerabilities; these vulnerabilities stemmed from improper handling of inputs, allowing for the injection...

PT-2026-46969

Name of the Vulnerable Software and Affected Versions DataDog::DogStatsd versions prior to 0.08 Description DataDog::DogStatsd does not properly sanitize input, which allows metric injections from untrusted sources. The format event method, utilized by the event method, fails to validate tag...

MAL-2026-4824 Malicious code in cdktn-provider-datadog (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce930466b101c48ae641d7e4ad57f3d5169b9f14b1e041e4264e75cbfd965b Package name cdktn-provider-datadog is a single-character variant f→n of HashiCorp's widely-used cdktf-provider-datadog CDKTF provider. README and...

Malicious code in cdktn-provider-datadog (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce930466b101c48ae641d7e4ad57f3d5169b9f14b1e041e4264e75cbfd965b Package name cdktn-provider-datadog is a single-character variant f→n of HashiCorp's widely-used cdktf-provider-datadog CDKTF provider. README and...

GHSA-MF9V-MFXR-J63J vulnerabilities

Vulnerabilities for packages: py3-opentelemetry-exporter-otlp, authentik, py3.13-scanner-test-libraries, dagster-fips, label-studio, datahub-ingestion-fips, synapse, awx, metaflow-service-fips, aws-cli, nemo, kubeflow-volumes-web-app, datadog-agent, tritonserver-backend-vllm-cuda-12.9,...

CVE-2026-44431 vulnerabilities

Vulnerabilities for packages: py3-opentelemetry-exporter-otlp, authentik, py3.13-scanner-test-libraries, dagster-fips, label-studio, datahub-ingestion-fips, synapse, awx, metaflow-service-fips, aws-cli, nemo, kubeflow-volumes-web-app, datadog-agent, tritonserver-backend-vllm-cuda-12.9,...

GHSA-QCCP-GFCP-XXVC vulnerabilities

Vulnerabilities for packages: py3-opentelemetry-exporter-otlp, authentik, py3.13-scanner-test-libraries, dagster-fips, label-studio, datahub-ingestion-fips, synapse, awx, metaflow-service-fips, aws-cli, nemo, kubeflow-volumes-web-app, datadog-agent, tritonserver-backend-vllm-cuda-12.9,...

CVE-2026-44432 vulnerabilities

Vulnerabilities for packages: py3-opentelemetry-exporter-otlp, authentik, py3.13-scanner-test-libraries, dagster-fips, label-studio, datahub-ingestion-fips, synapse, awx, metaflow-service-fips, aws-cli, nemo, kubeflow-volumes-web-app, datadog-agent, tritonserver-backend-vllm-cuda-12.9,...

CVE-2026-44405 vulnerabilities

Vulnerabilities for packages: py3-paramiko, airflow, datadog-agent, az, superset...

GHSA-R374-RXX8-8654 vulnerabilities

Vulnerabilities for packages: py3-paramiko, airflow, datadog-agent, az, superset...

CVE-2026-44405 vulnerabilities

Vulnerabilities for packages: nemo, openstack-nova-2026.1, superset, keep, authentik, pgadmin4, datadog-agent, az, airflow, datadog-agent-fips, keep-fips, superset-fips, duplicity, py3-paramiko, authentik-fips...

GHSA-R374-RXX8-8654 vulnerabilities

Vulnerabilities for packages: nemo, openstack-nova-2026.1, superset, keep, authentik, pgadmin4, datadog-agent, az, airflow, datadog-agent-fips, keep-fips, superset-fips, duplicity, py3-paramiko, authentik-fips...

GHSA-VFMQ-68HX-4JFW vulnerabilities

Vulnerabilities for packages: airflow, kubeflow-pipelines-visualization-server, datadog-agent, open-webui...

CVE-2026-41066 vulnerabilities

Vulnerabilities for packages: airflow, kubeflow-pipelines-visualization-server, datadog-agent, open-webui...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: karpenter, aws-flb-kinesis, ingress-nginx-controller, prometheus-operator, aws-flb-firehose, coredns, prometheus, kots, k3s, hubble, libnvidia-container, kaf, kubernetes-dashboard, kubernetes, cert-manager, snyk-cli, nerdctl, cilium-cli, fscrypt, runc, telegraf,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, dkron, policy-controller, cerbos, dbmate, aws-flb-firehose, wal-g, cue, crossplane-provider-azure-sql, minio-object-browser, gitsign, knative-eventing, oauth2-proxy, hubble-ui, step, vault-benchmark, gh, kubeflow-katib, rancher-agent,...

CVE-2026-33817 vulnerabilities

Vulnerabilities for packages: zot, fuse-overlayfs-snapshotter, kine, loki, containerd, k3s...

GHSA-6JWV-W5XF-7J27 vulnerabilities

Vulnerabilities for packages: zot, fuse-overlayfs-snapshotter, kine, loki, containerd, k3s...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception in the cipher.KeyUnwrap function when decrypting a JSON Web Encryption JWE object with a key wrapping algorithm ending in 'KW', except for 'A128GCMKW', 'A192GCMKW', and 'A256GCMKW' and the encryptedkey field is empty...

Go JOSE Panics in JWE decryption

Impact Decrypting a JSON Web Encryption JWE object will panic if the alg field indicates a key wrapping algorithm one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW and the encryptedkey field is empty. The panic happens when cipher.KeyUnwrap in keywrap.go attempts to...