MAL-2025-5982 Malicious code in datadog-instrumentations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbf74efed2b32abd010705d5410e78270b572065e8fc02c3a1961b4afc2585ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-WF8F-6423-GFXG vulnerabilities

Vulnerabilities for packages: druid, spark, tez, datadog-jmxfetch, scala...

CVE-2025-49128 vulnerabilities

Vulnerabilities for packages: druid, spark, tez, datadog-jmxfetch, scala...

GHSA-WF8F-6423-GFXG vulnerabilities

Vulnerabilities for packages: hadoop-client-modules, spark, tez, spark-fips, druid, wso2is, datadog-jmxfetch, scala, hadoop-fips...

CVE-2025-49128 vulnerabilities

Vulnerabilities for packages: hadoop-client-modules, spark, tez, spark-fips, druid, wso2is, datadog-jmxfetch, scala, hadoop-fips...

CVE-2023-0483

An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible for a project maintainer to extract a Datadog integration API key by modifying the site...

CVE-2023-37944

A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2022-3018

An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: wazero, newrelic-fluent-bit-output, render-template, caddy, nri-kafka, golangci-lint, argo-workflows, dask-gateway, cadvisor, nri-rabbitmq, lazygit, dagger, gops, aws-load-balancer-controller, supercronic, sbomqs, nri-memcached, spark-operator, k3s,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: wazero, newrelic-fluent-bit-output, render-template, caddy, nri-kafka, golangci-lint, argo-workflows, dask-gateway, cadvisor, nri-rabbitmq, lazygit, dagger, gops, aws-load-balancer-controller, supercronic, sbomqs, nri-memcached, spark-operator, k3s,...

Doppler announces integration with Datadog to streamline security and monitoring

San Francisco, United States / California, 30th January 2025, CyberNewsWire...

Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining

The infamous cryptojacking group known as TeamTNT appears to be readying for a new large-scale campaign targeting cloud-native environments for mining cryptocurrencies and renting out breached servers to third-parties. "The group is currently targeting exposed Docker daemons to deploy Sliver...

GHSA-5VVG-PVHP-HV2M vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2024-49750 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: kyverno-fips, policy-controller-fips, snyk-cli, conftest, cosign-fips, k8sgpt, kubescape, spire-server, zarf, kyverno, spire-server-fips, zot, policy-controller, kots, opa, tfsec, conftest-fips, cosign...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: conftest, cosign, kots, spire-server, snyk-cli, zot, kubescape, k8sgpt, tfsec, opa, policy-controller, zarf...

CVE-2024-8260 vulnerabilities

Vulnerabilities for packages: conftest, cosign, kots, spire-server, snyk-cli, zot, kubescape, k8sgpt, tfsec, opa, policy-controller, zarf...

Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2024-038)

The version of ecs-service-connect-agent installed on the remote host is prior to v1.29.6.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2024-038 advisory. dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context du...

Important: ecs-service-connect-agent

Issue Overview: dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws a...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2024-655)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-655 advisory. dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann...