15 matches found
GHSA-P3M5-H5V9-VQJ6 Datadog dd-trace-py: IAST instrumentation can lead to application DOS
Summary A flaw in dd-trace-py’s IAST instrumentation can cause the Python application process to terminate unexpectedly when processing certain attacker-controlled input. Only applications with IAST enabled are affected. IAST is disabled by default. Details The affected IAST string-processing...
EUVD-2026-110470
Datadog dd-trace-py: IAST instrumentation can lead to application DOS...
Datadog dd-trace-py: IAST instrumentation can lead to application DOS
Summary A flaw in dd-trace-py’s IAST instrumentation can cause the Python application process to terminate unexpectedly when processing certain attacker-controlled input. Only applications with IAST enabled are affected. IAST is disabled by default. Details The affected IAST string-processing...
CVE-2026-116589
A flaw was found in ddtrace. This issue allows a remote attacker to cause a denial of service DoS when Interactive Application Security Testing IAST is enabled. Specifically, the string-processing instrumentation fails to handle internal errors during old-style string formatting operations. By...
CVE-2026-116589
Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST string-processing instrumentation does not properly handle certain internal errors while old-style % string formatting processes attacker-controlled input. An unhandled error can terminate the Python process...
CVE-2026-116589
The Datadog dd-trace-py Python APM client (versions 3.13.0 through 4.15.5 ) contains a vulnerability in its IAST string-processing instrumentation . The root cause is the failure to properly handle internal errors during old-style % string formatting when processing attacker-controlled input. If ...
CVE-2026-116589 Datadog dd-trace-py: IAST instrumentation can lead to application DOS
Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST string-processing instrumentation does not properly handle certain internal errors while old-style % string formatting processes attacker-controlled input. An unhandled error can terminate the Python process...
CVE-2026-116589 Datadog dd-trace-py: IAST instrumentation can lead to application DOS
Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST string-processing instrumentation does not properly handle certain internal errors while old-style % string formatting processes attacker-controlled input. An unhandled error can terminate the Python process...
PT-2026-125469
Summary A flaw in dd-trace-py’s IAST instrumentation can cause the Python application process to terminate unexpectedly when processing certain attacker-controlled input. Only applications with IAST enabled are affected. IAST is disabled by default. Details The affected IAST string-processing...
MAL-2024-9722 Malicious code in native-iast-rewriter (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in native-iast-rewriter (npm)
--- -= Per source details. Do not edit below this line.=-...
6 Types of Applications Security Testing You Must Know About
Application security testing is a critical component of modern software development, ensuring that applications are robust and resilient against malicious attacks. As cyber threats continue to evolve in complexity and frequency, the need to integrate comprehensive security measures throughout the...
clickhouse:codegen_select_fuzzer: Use-of-uninitialized-value in DB::IAST::~IAST
Project: https://github.com/ClickHouse/ClickHouse.git Detailed Report: https://oss-fuzz.com/testcase?key=4544949383462912 Project: clickhouse Fuzzing Engine: libFuzzer Fuzz Target: codegenselectfuzzer Job Type: libfuzzermsanclickhouse Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...
DongTai - An Interactive Application Security testing(IAST) Product That Supports The Detection Of OWASP WEB TOP 10 Vulnerabilities, Multi-Request Related Vulnerabilities (Including Logic Vulnerabilities, Unauthorized Access Vulnerabilities, Etc.), Third-Party Component Vulnerabilities, Etc.
中文版本Chinese version About DongTai IAST DongTai IAST is an open-source passive interactive security testing IAST product. It uses dynamic hooks and taint tracking algorithms to achieve universalvulnerability detection and multiples request associated withvulnerability detection including but not...
A few words about Gartner’s “Magic Quadrant for Application Security Testing” 2018
February and March are the hot months for marketing reports. I already wrote about IDC and Forrester reports about Vulnerability Management-related markets. And this Monday, March 19, Gartner released new "Magic Quadrant for Application Security Testing". You can buy it on the official website fo...