Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
added 2026/08/28 4:35 p.m.14 views

datadog-opentelemetry has unbounded W3C tracestate parsing that may lead to DoS

Impact Datadog tracing libraries that implement W3C Trace Context tracecontext propagation parse the incoming tracestate header without enforcing a size cap on the Datadog vendor entry dd=.... The dd= value contains semicolon-separated key:value pairs, and the parser allocates a hash-map entry fo...

7.5CVSS5.9AI score0.00562EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder