GHSA-22XC-XG2R-9J7V vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

GHSA-8FV2-88GG-HM7Q vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53719 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

GHSA-FCRP-7GC2-93G7 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

GHSA-M2V6-2JMH-4C68 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53714 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53716 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53718 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53717 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53715 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

CVE-2026-53713 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

GHSA-CXPQ-8V7Q-CG56 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

GHSA-WCRF-9VRR-854F vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

GHSA-H7PQ-86H8-RP5X vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent...

dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

GHSA-WXQQ-GCQ8-C443 dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

GHSA-MW54-J2V2-42HR dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

PT-2026-60364

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DD TRACE BAGGAGE MAX ITEMS default 64 and DD TRACE BAGGAGE MAX BYTES default 8192 limits were applied only to bagga...

PT-2026-60360

Name of the Vulnerable Software and Affected Versions dd-trace-py versions prior to 4.8.2 Description Datadog tracing libraries implementing W3C baggage propagation fail to enforce limits on the number of items or total bytes when parsing incoming baggage HTTP headers during the extraction proces...