458 matches found
PT-2026-60363
Name of the Vulnerable Software and Affected Versions dd-trace-go versions prior to 2.8.1 Description Datadog tracing libraries implementing W3C baggage propagation fail to enforce limits on the number of items or total bytes when parsing incoming baggage HTTP headers during the extraction proces...
PT-2026-60361
Name of the Vulnerable Software and Affected Versions dd-trace versions prior to 5.100.0 Description An issue exists in the W3C baggage propagation within packages/dd-trace/src/baggage.js and packages/dd-trace/src/opentracing/propagation/text map.js where incoming baggage HTTP headers are parsed...
PT-2026-60362
Name of the Vulnerable Software and Affected Versions Datadog .NET Tracer versions prior to 3.43.0 Description Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing limits on the number of items or the total byte size during...
GHSA-2WC2-FM75-P42X vulnerabilities
Vulnerabilities for packages: open-webui, datadog-agent-fips, datadog-agent, kubeflow-pipelines-visualization-server...
CVE-2026-49476 vulnerabilities
Vulnerabilities for packages: open-webui, datadog-agent-fips, datadog-agent, kubeflow-pipelines-visualization-server...
CVE-2026-49476 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, datadog-agent...
GHSA-2WC2-FM75-P42X vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, datadog-agent...
GHSA-836R-79RF-4M37 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, datadog-agent...
CVE-2026-49477 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, datadog-agent...
GHSA-836R-79RF-4M37 vulnerabilities
Vulnerabilities for packages: open-webui, datadog-agent-fips, datadog-agent, kubeflow-pipelines-visualization-server...
CVE-2026-49477 vulnerabilities
Vulnerabilities for packages: open-webui, datadog-agent-fips, datadog-agent, kubeflow-pipelines-visualization-server...
CVE-2026-57522
Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens, which substitutes user-controlled values into event-integration templates without JSON encoding. When an organization has configured an event integration whose template referenc...
EUVD-2026-39543
Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens, which substitutes user-controlled values into event-integration templates without JSON encoding. When an organization has configured an event integration whose template referenc...
PT-2026-52576
Name of the Vulnerable Software and Affected Versions Bitwarden Server versions prior to 2026.5.0 Description An issue exists in the IntegrationTemplateProcessor.ReplaceTokens function where user-controlled values are substituted into event-integration templates without proper JSON encoding. An...
CVE-2026-41178 vulnerabilities
Vulnerabilities for packages: gatus, cluster-api-gcp-controller-fips, crossplane-provider-family-aws, apply-cve-bump, gitlab-runner-fips, witness, consul-fips, flux-image-reflector-controller, k8s-image-swapper-fips, ld-relay-fips, crossplane-provider-aws-ec2-fips, dkron-fips, trivy-fips,...
GHSA-5WRP-CWCJ-Q835 vulnerabilities
Vulnerabilities for packages: gatus, cluster-api-gcp-controller-fips, crossplane-provider-family-aws, apply-cve-bump, gitlab-runner-fips, witness, consul-fips, flux-image-reflector-controller, k8s-image-swapper-fips, ld-relay-fips, crossplane-provider-aws-ec2-fips, dkron-fips, trivy-fips,...
GHSA-5WRP-CWCJ-Q835 vulnerabilities
Vulnerabilities for packages: docker-compose, fluent-operator, knative-serving, crossplane-provider-family-azure, prometheus-adapter, ratify, crossplane-provider-keycloak, kubernetes-dns-node-cache, chartmuseum, crossplane-provider-aws-kms, ksops, kyverno-notation-aws,...
CVE-2026-41178 vulnerabilities
Vulnerabilities for packages: docker-compose, fluent-operator, knative-serving, crossplane-provider-family-azure, prometheus-adapter, ratify, crossplane-provider-keycloak, kubernetes-dns-node-cache, chartmuseum, crossplane-provider-aws-kms, ksops, kyverno-notation-aws,...