482 matches found
Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2024-655)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-655 advisory. dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann...
Trojanized jQuery Packages Found on npm, GitHub, and jsDelivr Code Repositories
Unknown threat actors have been found propagating trojanized versions of jQuery on npm, GitHub, and jsDelivr in what appears to be an instance of a "complex and persistent" supply chain attack. "This attack stands out due to the high variability across packages," Phylum said in an analysis...
GHSA-248V-346W-9CWC vulnerabilities
Vulnerabilities for packages: confluent-docker-utils, jwt-tool, py3-pipenv, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, barman, patroni, airflow, nvidia-nsight-compute-13.2, superset, mlflow, dask-gateway, py3-certifi, kubeflow-katib, py3-cassandra-medusa, az, k8s-sidecar,...
GHSA-MH55-GQVF-XFWM vulnerabilities
Vulnerabilities for packages: timestamp-authority, grafana-mimir, rekor, fulcio, cortex, prometheus-alertmanager...
CVE-2024-39689 vulnerabilities
Vulnerabilities for packages: confluent-docker-utils, jwt-tool, py3-pipenv, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, barman, patroni, airflow, nvidia-nsight-compute-13.2, superset, mlflow, dask-gateway, py3-certifi, kubeflow-katib, py3-cassandra-medusa, az, k8s-sidecar,...
CVE-2024-38525
dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws an uncaught...
CVE-2024-38525
CVE-2024-38525 affects dd-trace-cpp (Datadog tracing for C++). The root cause is that when trying to extract trace context from malformed unicode, the code logs audited headers/values using the nlohmann JSON library and triggers an uncaught exception, causing a crash. The vulnerability has been p...
CVE-2024-38525 dd-trace-cpp malformed unicode header values may cause crash
dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws an uncaught...
GHSA-XFHP-JF8P-MH5W vulnerabilities
Vulnerabilities for packages: conftest, trivy, kots, snyk-cli, k9s, grype, terraform, tflint, zot, kubescape, terragrunt, wolfictl, tfsec, zarf...
GHSA-XFHP-JF8P-MH5W vulnerabilities
Vulnerabilities for packages: terragrunt, snyk-cli, grype, terraform, conftest, tflint, kubescape, k9s, wolfictl, trivy-fips, zot, trivy, kots, tfsec, conftest-fips, zarf...
CVE-2024-6257 vulnerabilities
Vulnerabilities for packages: terragrunt, snyk-cli, grype, terraform, conftest, tflint, kubescape, k9s, wolfictl, trivy-fips, zot, trivy, kots, tfsec, conftest-fips, zarf...
Malicious code in fluent_plugin-datadog-statsd (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6903 Malicious code in fluent_plugin-datadog-statsd (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in datadog_notifications (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in datadog_cli (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in datadog-proxy (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6857 Malicious code in datadog-proxy (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in datadog-apm (RubyGems)
--- -= Per source details. Do not edit below this line.=-...