GHSA-7JXH-36Q5-GCQV vulnerabilities

Vulnerabilities for packages: skaffold, rancher-helm, zot, grype-db, cluster-api-helm-controller, envoy-gateway-fips, kaniko, docker-cli-buildx-fips, k9s, buildkitd, rancher, cloudbeat-fips, neuvector, redpanda-operator, kube-arangodb-fips, helm-operator, newrelic-infrastructure-agent,...

CVE-2026-53495 vulnerabilities

Vulnerabilities for packages: skaffold, rancher-helm, zot, grype-db, cluster-api-helm-controller, envoy-gateway-fips, kaniko, docker-cli-buildx-fips, k9s, buildkitd, rancher, cloudbeat-fips, neuvector, redpanda-operator, kube-arangodb-fips, helm-operator, newrelic-infrastructure-agent,...

threatest v1.5.0

Threatest Threatest is a CLI and Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post:...

GHSA-5CC2-282F-JJQ2 vulnerabilities

Vulnerabilities for packages: datadog-agent...

CVE-2026-15925 vulnerabilities

Vulnerabilities for packages: datadog-agent...

GHSA-5CC2-282F-JJQ2 vulnerabilities

Vulnerabilities for packages: datadog-agent, keep-fips, mlrun-fips, airflow, datadog-agent-fips, mlrun, keep...

CVE-2026-15925 vulnerabilities

Vulnerabilities for packages: datadog-agent, keep-fips, mlrun-fips, airflow, datadog-agent-fips, mlrun, keep...

GHSA-GPWF-4H98-V82Q datadog-opentelemetry has unbounded W3C tracestate parsing that may lead to DoS

Impact Datadog tracing libraries that implement W3C Trace Context tracecontext propagation parse the incoming tracestate header without enforcing a size cap on the Datadog vendor entry dd=.... The dd= value contains semicolon-separated key:value pairs, and the parser allocates a hash-map entry fo...

EUVD-2026-67829

dd-trace-rs provides Datadog application performance monitoring for Rust. From 0.1.0 until 0.3.3, datadog-opentelemetry/src/propagation/tracecontext.rs parses the W3C tracestate header and collects every semicolon-separated key and value pair in the Datadog dd=... vendor entry into a HashMap...

PT-2026-83230

dd-trace-rs provides Datadog application performance monitoring for Rust. From 0.1.0 until 0.3.3, datadog-opentelemetry/src/propagation/tracecontext.rs parses the W3C tracestate header and collects every semicolon-separated key and value pair in the Datadog dd=... vendor entry into a HashMap...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: emissary, descheduler, spqr, kube-state-metrics, cilium, cluster-api-azure-controller, helm-operator, spicedb, openfga, k3s, kapp-controller, rancher-agent, kube-metrics-adapter, kubescape, metallb, cass-operator, cluster-api-helm-controller, cert-manager-webhook-pdn...

GO-2026-6005 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator-fips, gitlab-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator...

GO-2026-6006 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator-fips, gitlab-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator...

GO-2026-6003 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator-fips, gitlab-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator...

GO-2026-6008 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator-fips, gitlab-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: datadog-agent, osv-scanner, jaeger-fips, opencost-fips, gitlab-workhorse-ce-fips, opencost, flux-operator, flux-operator-fips, datadog-agent-fips, gptscript, gitlab-workhorse-ce, ferretdb, jaeger, github-mcp-server...

GO-2026-4312 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent, datadog-agent-fips...

GO-2026-6007 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator-fips, gitlab-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator...

GO-2026-6009 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator-fips, gitlab-operator-fips, tigera-operator, datadog-agent-fips, gitlab-operator...

GO-2026-4770 vulnerabilities

Vulnerabilities for packages: datadog-agent, osv-scanner, jaeger-fips, opencost-fips, gitlab-workhorse-ce-fips, opencost, livekit-cli, flux-operator, glab, flux-operator-fips, datadog-agent-fips, gitlab-workhorse-ce, ferretdb, jaeger...