565 matches found
datadog/dd-trace Circumvents open_basedir INI directive
datadog/dd-trace versions 0.30.0 prior to 0.30.2 are affected by a security and stability issue outlined in PR 579. This pull request ensures that the ddtrace.requestinithook remains bound by the openbasedir INI directive, effectively addressing potential vulnerabilities related to openbasedir...
GHSA-QVGG-R6RQ-VWFX datadog/dd-trace Circumvents open_basedir INI directive
datadog/dd-trace versions 0.30.0 prior to 0.30.2 are affected by a security and stability issue outlined in PR 579. This pull request ensures that the ddtrace.requestinithook remains bound by the openbasedir INI directive, effectively addressing potential vulnerabilities related to openbasedir...
PT-2024-40441 · Datadog · Datadog/Dd-Trace
Name of the Vulnerable Software and Affected Versions: datadog/dd-trace versions 0.30.0 through 0.30.1 Description: The issue concerns a security and stability problem where the ddtrace.request init hook was not properly bound by the open basedir INI directive, potentially leading to...
GHSA-MR82-8J83-VXMV vulnerabilities
Vulnerabilities for packages: datadog-agent...
GHSA-MR82-8J83-VXMV vulnerabilities
Vulnerabilities for packages: datadog-agent...
CVE-2024-3772 vulnerabilities
Vulnerabilities for packages: datadog-agent...
CVE-2024-3772 vulnerabilities
Vulnerabilities for packages: datadog-agent...
GHSA-RHH4-RH7C-7R5V vulnerabilities
Vulnerabilities for packages: zarf, k9s, filebrowser, kubescape, wolfictl, terragrunt, kots, nuclei...
CVE-2024-0406 vulnerabilities
Vulnerabilities for packages: zarf, k9s, filebrowser, kubescape, wolfictl, terragrunt, kots, nuclei...
CVE-2024-0406 vulnerabilities
Vulnerabilities for packages: k9s, kubescape, chainctl, kots, gotenberg, vault, filebrowser, zarf, terragrunt, nuclei, wolfictl...
CVE-2024-29018 vulnerabilities
Vulnerabilities for packages: grype, conftest-fips, crossplane, loki, kubescape, zot, buf, docker-compose, ko, conftest, cadvisor, cilium-cli, kaniko, buildkitd, spire-server-fips, wolfictl, cadvisor-fips, aactl, kargo, spire-server, up, trivy, dagger, syft, melange, ctop, prometheus, tkn...
GHSA-MQ39-4GV4-MVPX vulnerabilities
Vulnerabilities for packages: grype, conftest-fips, crossplane, loki, kubescape, zot, buf, docker-compose, ko, conftest, cadvisor, cilium-cli, kaniko, buildkitd, spire-server-fips, wolfictl, cadvisor-fips, aactl, kargo, spire-server, up, trivy, dagger, syft, melange, ctop, prometheus, tkn...
BIT-GITLAB-2021-22260
A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to execute arbitrary JavaScript code on the...
BIT-GITLAB-2022-2534
An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2 before 15.2.1. GitLab was returning contributor emails due to improper data handling in the Datadog integration...
BIT-GITLAB-2022-3018
An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 allows a project maintainer to access the DataDog integration API key from webhook logs...
BIT-GITLAB-2023-0483
An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible for a project maintainer to extract a Datadog integration API key by modifying the site...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: step-ca, crossplane-provider-aws-elasticache, crossplane-provider-aws-sns, kube-bench, kubewatch, nerdctl, newrelic-infrastructure-agent, kubescape, temporal, kubevela, timestamp-authority, kaf, frp, crossplane-provider-aws-route53, flux-helm-controller,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: prometheus-postgres-exporter, crossplane-provider-azure-authorization, nri-discovery-kubernetes, restic, vault-k8s, vault-k8s-fips, cfssl, logstash-exporter-fips, helm, terraform-docs, cass-operator-fips-no-pvc-delete, envoy-ratelimit, grpc-health-probe,...
CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: bazelisk, kube-bench, kubewatch, nerdctl, newrelic-infrastructure-agent, speedtest-go, temporal, kubevela, nri-cassandra, newrelic-fluent-bit-output, kaf, volume-modifier-for-k8s, flux-helm-controller, ip-masq-agent, go-md2man, mockery, cue, oras, fq, slsa-verifier,...