517 matches found
EUVD-2026-45328
Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. Prior to 2.8.1, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or...
CVE-2026-50274 dd-trace-go: Improper parsing of W3C baggage headers may lead to DoS
Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. Prior to 2.8.1, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or...
CVE-2026-50274
Datadog dd-trace-go (Go client library for Datadog APM/ profiling/ security monitoring) is affected prior to version 2.8.1 due to improper enforcement of DD_TRACE_BAGGAGE_MAX_ITEMS/MAX_BYTES on the baggage header extract path. A remote, unauthenticated attacker can send HTTP requests with an exce...
EUVD-2026-45323
dd-trace is the Datadog APM client for Node.js. Prior to 5.100.0, W3C baggage propagation in packages/dd-trace/src/baggage.js and packages/dd-trace/src/opentracing/propagation/textmap.js parsed incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES on...
CVE-2026-50273
Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES on extraction, allowing a remote...
CVE-2026-50273 Datadog .NET Tracer: Improper parsing of W3C baggage headers may lead to DoS
Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES on extraction, allowing a remote...
CVE-2026-50273 Datadog .NET Tracer: Improper parsing of W3C baggage headers may lead to DoS
Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES on extraction, allowing a remote...
CVE-2026-50273
Datadog .NET Tracer (dd-trace-dotnet) is affected prior to version 3.43.0 by CVE-2026-50273 due to improper parsing of W3C baggage headers. The extraction path does not enforce DD_TRACE_BAGGAGE_MAX_ITEMS or DD_TRACE_BAGGAGE_MAX_BYTES, allowing a remote unauthenticated attacker to send a header wi...
EUVD-2026-45243
Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES on extraction, allowing a remote...
CVE-2026-53714 vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...
CVE-2026-53715 vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...
CVE-2026-53716 vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...
CVE-2026-53717 vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...
GHSA-8FV2-88GG-HM7Q vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...
GHSA-CXPQ-8V7Q-CG56 vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...
GHSA-M2V6-2JMH-4C68 vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...
GHSA-22XC-XG2R-9J7V vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...
CVE-2026-53718 vulnerabilities
Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips, gitlab-operator-fips, gitlab-operator, tigera-operator-fips...