CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: osv-scanner, opencost, jaeger, github-mcp-server, ferretdb, gptscript, datadog-agent...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: osv-scanner, opencost, jaeger, github-mcp-server, ferretdb, gptscript, datadog-agent...

CVE-2026-27896 vulnerabilities

Vulnerabilities for packages: opencost-fips, flux-operator, ferretdb, gitlab-workhorse-ce-fips, jaeger, github-mcp-server, flux-operator-fips, datadog-agent-fips, osv-scanner, gitlab-workhorse-ce, opencost, datadog-agent, jaeger-fips, gptscript...

GHSA-WVJ2-96WP-FQ3F vulnerabilities

Vulnerabilities for packages: opencost-fips, flux-operator, ferretdb, gitlab-workhorse-ce-fips, jaeger, github-mcp-server, flux-operator-fips, datadog-agent-fips, osv-scanner, gitlab-workhorse-ce, opencost, datadog-agent, jaeger-fips, gptscript...

GHSA-R6PH-V2QM-Q3C2 vulnerabilities

Vulnerabilities for packages: nemo, kserve, opal, openstack-kolla-toolbox-2025.2, py3-cassandra-medusa, gitlab-cng-fips, ggshield, semgrep, prefect, pgadmin4, jupyter-base-notebook, open-webui, k8s-sidecar, litellm, mitmproxy, in-toto, barman, awx, apache-beam-python-3.11-sdk, dask-kubernetes,...

CVE-2026-26007 vulnerabilities

Vulnerabilities for packages: nemo, kserve, opal, openstack-kolla-toolbox-2025.2, py3-cassandra-medusa, gitlab-cng-fips, ggshield, semgrep, prefect, pgadmin4, jupyter-base-notebook, open-webui, k8s-sidecar, litellm, mitmproxy, in-toto, barman, awx, apache-beam-python-3.11-sdk, dask-kubernetes,...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: bank-vaults, jitsucom-bulker...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: ratify-fips, jitsucom-bulker, docker-compose-fips, rancher-security-scan, kyverno-notation-aws-fips, grafana, istio-fips, zitadel, boring-registry-fips, k9s-fips, mattermost-fips, tkn-fips, grafana-fips, beats-fips, bank-vaults, beats,...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, emissary, airflow, kubeflow-jupyter-web-app, mlflow, open-webui, py3-cassandra-medusa, py3-setuptools, pypy-3.11, semgrep, datadog-agent, pypy-3.10, superset, kserve, kubeflow-katib...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter, nemo, kserve, tensorflow-gpu-jupyter, opal, py3-cassandra-medusa, semgrep, azure-functions-python-worker, pgadmin4, open-webui, awx, apache-beam-python-3.11-sdk, pypy-3.10, kubeflow-katib, dask-kubernetes, dbt-bigquery, emissary,...

GHSA-XRWG-MQJ6-6M22 vulnerabilities

Vulnerabilities for packages: datadog-agent...

CVE-2026-22771 vulnerabilities

Vulnerabilities for packages: datadog-agent...

CVE-2026-22771 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips...

GHSA-XRWG-MQJ6-6M22 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips...

CVE-2021-22260

A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to execute arbitrary JavaScript code on the...

CVE-2025-47908 vulnerabilities

Vulnerabilities for packages: rekor, grafana-mimir, timestamp-authority, prometheus-alertmanager, fulcio, cortex...

GHSA-77HH-43CM-V8J6 vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips...

CVE-2025-47908 vulnerabilities

Vulnerabilities for packages: timestamp-authority, rekor-fips, cortex-fips, fulcio, prometheus-alertmanager-fips, timestamp-authority-fips, argo-cd, fulcio-fips, prometheus-alertmanager, rekor, grafana-mimir, cortex...

MAL-2025-192407 Malicious code in datadog-checks-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bc16bdf501ec221458349c8a28879a12b353a46c1126cc93d9f0ce3af9d793 The package datadog-checks-downloader was found to contain malicious code. Source: ghsa-malware...

Malicious code in datadog-checks-dependency-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965b1dfdded3e786f1691c392462534c6a7dc105aa989d08e68ff1b6c9f78bc7 The package datadog-checks-dependency-provider was found to contain malicious code. Source: ghsa-malware...