CVE-2026-39196: Improper Neutralization of Special Elements used in an SQL Command

Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the seturiquery parameter in the KeyPartitioner::partition function. This vulnerability allows attackers to access sensitive database information via crafted SQL statements...

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

GHSA-QP9X-WP8F-QGJJ vulnerabilities

Vulnerabilities for packages: datadog-agent...

GHSA-QP9X-WP8F-QGJJ vulnerabilities

Vulnerabilities for packages: datadog-agent, datadog-agent-fips...

io.micrometer:micrometer-atlas-starter (0.6.3.release), io.micrometer:micrometer-datadog-starter (0.6.3.release) +2 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (0.6.3.release)

io.micrometer:micrometer-core MAVEN version 0.6.3.release is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-core and may be impacted: - io.micrometer:micrometer-atlas-starter 0.6.3.release - io.micrometer:micrometer-datadog-start...

io.micrometer:micrometer-atlas-starter (0.7.0.release), io.micrometer:micrometer-datadog-starter (0.7.0.release) +2 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (0.7.0.release)

io.micrometer:micrometer-core MAVEN version 0.7.0.release is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-core and may be impacted: - io.micrometer:micrometer-atlas-starter 0.7.0.release - io.micrometer:micrometer-datadog-start...

io.micrometer:micrometer-atlas-starter (0.8.0.release), io.micrometer:micrometer-datadog-starter (0.8.0.release) +5 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (0.8.0.release)

io.micrometer:micrometer-core MAVEN version 0.8.0.release is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-core and may be impacted: - io.micrometer:micrometer-atlas-starter 0.8.0.release - io.micrometer:micrometer-datadog-start...

io.micrometer:micrometer-atlas-starter (0.9.0.release), io.micrometer:micrometer-datadog-starter (0.9.0.release) +6 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (0.9.0.release)

io.micrometer:micrometer-core MAVEN version 0.9.0.release is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-core and may be impacted: - io.micrometer:micrometer-atlas-starter 0.9.0.release - io.micrometer:micrometer-datadog-start...

io.micrometer:micrometer-atlas-starter (0.9.1.release), io.micrometer:micrometer-datadog-starter (0.9.1.release) +6 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (0.9.1.release)

io.micrometer:micrometer-core MAVEN version 0.9.1.release is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-core and may be impacted: - io.micrometer:micrometer-atlas-starter 0.9.1.release - io.micrometer:micrometer-datadog-start...

io.micrometer:micrometer-atlas-starter (0.11.0.release), io.micrometer:micrometer-datadog-starter (0.11.0.release) +6 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (0.11.0.release)

io.micrometer:micrometer-core MAVEN version 0.11.0.release is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-core and may be impacted: - io.micrometer:micrometer-atlas-starter 0.11.0.release -...

io.micrometer:micrometer-registry-atlas (0.12.0.release), io.micrometer:micrometer-registry-datadog (0.12.0.release) +6 more potentially affected by CVE-2026-40984 via io.micrometer:micrometer-core (0.12.0.release)

io.micrometer:micrometer-core MAVEN version 0.12.0.release is affected by a known vulnerability. The following packages have a transitive dependency on io.micrometer:micrometer-core and may be impacted: - io.micrometer:micrometer-registry-atlas 0.12.0.release -...

CVE-2026-11362

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The formatevent method used by the event method does not validate the content of the tags, whi...

CVE-2026-11362

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The formatevent method used by the event method does not validate the content of the tags, whi...

CVE-2026-11362 DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The formatevent method used by the event method does not validate the content of the tags, whi...