CVE-2026-53717 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

GHSA-22XC-XG2R-9J7V vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

CVE-2026-53719 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

GHSA-CXPQ-8V7Q-CG56 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

GHSA-FCRP-7GC2-93G7 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

GHSA-H7PQ-86H8-RP5X vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

GHSA-WCRF-9VRR-854F vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

CVE-2026-50273: Allocation of Resources Without Limits or Throttling

Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES on extraction, allowing a remote...

CVE-2026-50274: Allocation of Resources Without Limits or Throttling

Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. Prior to 2.8.1, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or...

dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through improper parsing of W3C baggage HTTP headers in the extraction process. An attacker can exhaust system resources by sending requests with an excessive number of comma-separate...

GHSA-WXQQ-GCQ8-C443 dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

aio-pika-rpc (1.1.0), datadog-lambda (0.10.0) potentially affected by CVE-2026-50271 via ddtrace (0.30.2)

ddtrace PYPI version 0.30.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aio-pika-rpc 1.1.0 - datadog-lambda 0.10.0 Source cves: CVE-2026-50271 Source advisory: OSV:GHSA-MW54-J2V2-42HR...

datadog-lambda (2.14.0), ddtrace-aiomisc (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-50271 via ddtrace (0.31.0)

ddtrace PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 2.14.0 - ddtrace-aiomisc =1.0.0, =1.0.2 Source cves: CVE-2026-50271 Source advisory: OSV:GHSA-MW54-J2V2-42HR...

datadog-lambda (2.16.0) potentially affected by CVE-2026-50271 via ddtrace (0.36.0)

ddtrace PYPI version 0.36.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 2.16.0 Source cves: CVE-2026-50271 Source advisory: OSV:GHSA-MW54-J2V2-42HR...

datadog-lambda (>=2.19.0, <=2.21.0) potentially affected by CVE-2026-50271 via ddtrace (0.40.0)

ddtrace PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =2.19.0, =2.21.0 Source cves: CVE-2026-50271 Source advisory: OSV:GHSA-MW54-J2V2-42HR...

datadog-lambda (2.24.0) potentially affected by CVE-2026-50271 via ddtrace (0.41.2)

ddtrace PYPI version 0.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 2.24.0 Source cves: CVE-2026-50271 Source advisory: OSV:GHSA-MW54-J2V2-42HR...

datadog-lambda (2.26.0), pinecone-client (>=0.7.5, <=0.8.59) potentially affected by CVE-2026-50271 via ddtrace (0.44.0)

ddtrace PYPI version 0.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 2.26.0 - pinecone-client =0.7.5, =0.8.59 Source cves: CVE-2026-50271 Source advisory: OSV:GHSA-MW54-J2V2-42HR...

datadog-lambda (>=2.27.0, <=3.31.0) potentially affected by CVE-2026-50271 via ddtrace (0.45.0)

ddtrace PYPI version 0.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =2.27.0, =3.31.0 Source cves: CVE-2026-50271 Source advisory: OSV:GHSA-MW54-J2V2-42HR...