808 matches found
CVE-2026-116588
Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, the default query-string obfuscation regular expression can exhibit excessive backtracking while synchronously processing attacker-controlled URL query strings for HTTP span metadata. A remote attacker can...
CVE-2026-116589
The Datadog dd-trace-py Python APM client (versions 3.13.0 through 4.15.5 ) contains a vulnerability in its IAST string-processing instrumentation . The root cause is the failure to properly handle internal errors during old-style % string formatting when processing attacker-controlled input. If ...
CVE-2026-116589 Datadog dd-trace-py: IAST instrumentation can lead to application DOS
Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST string-processing instrumentation does not properly handle certain internal errors while old-style % string formatting processes attacker-controlled input. An unhandled error can terminate the Python process...
CVE-2026-116588
The Datadog dd-trace-py Python APM client (versions 1.5.0 through 3.19.9 and 4.15.6) is vulnerable to a Regular Expression Denial of Service (ReDOS) . The flaw exists in the default query-string obfuscation regular expression, which can undergo excessive backtracking when synchronously processing...
CVE-2026-116588 Datadog dd-trace-py: ReDOS in URL query string obfuscation
Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, the default query-string obfuscation regular expression can exhibit excessive backtracking while synchronously processing attacker-controlled URL query strings for HTTP span metadata. A remote attacker can...
EUVD-2026-110469
Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, the default query-string obfuscation regular expression can exhibit excessive backtracking while synchronously processing attacker-controlled URL query strings for HTTP span metadata. A remote attacker can...
threatest
Threatest Threatest is a CLI and Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post:...
stratus-red-team
Stratus Red Team Stratus Red Team is "Atomic Red Team™" for the cloud, providing granular and self-contained emulation of offensive attack techniques. Announcement blog posts: https://www.datadoghq.com/blog/cyber-attack-simulation-with-stratus-red-team/...
dirtypipe-container-breakout-poc
Dirty Pipe Container Escape Moved to https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/dirtypipe-container-breakout...
security-labs-pocs
Datadog Security Labs Research and Proof of Concept Code This repository contains information, exploits, malware samples, and scripts from Datadog Security Labs. Goal This repository aims at providing proof of concept exploits, malware samples and technical demos to help the community respond to...
GHSA-XCQ7-P3PF-P88H vulnerabilities
Vulnerabilities for packages: datadog-agent, semgrep...
CVE-2026-114603 vulnerabilities
Vulnerabilities for packages: datadog-agent, semgrep...
GHSA-6Q48-6C7W-9GW2 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, httpie, jwt-tool, k8s-sidecar, superset, pypy-3.10, open-webui, jupyter-base-notebook, py3-cassandra-medusa, confluent-docker-utils, kserve, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, reflex, semgrep, az,...
GO-2026-6686 vulnerabilities
Vulnerabilities for packages: k8s-image-swapper-fips, scorecard, newrelic-infrastructure-agent, runc-fips, umoci, chaos-mesh-fips, rke2-runtime-fips, rancher-agent, kubevirt-cdi-importer, packer-fips, rancher, zarf-fips, packer, cloudbeat-fips, ctop-fips, chaos-mesh, k3s, eks-distro-fips,...
GO-2026-6686 vulnerabilities
Vulnerabilities for packages: runc, scorecard, ctop, vcluster, xeol, undock, gosu, datadog-agent, docker, newrelic-infrastructure-agent, act, zarf, dagger, neuvector-scanner, k3d, k3s, containerd...
CVE-2026-61801 vulnerabilities
Vulnerabilities for packages: runc, scorecard, ctop, vcluster, xeol, undock, gosu, datadog-agent, docker, newrelic-infrastructure-agent, act, zarf, dagger, neuvector-scanner, k3d, k3s, containerd...
GHSA-MJCV-P78Q-W5FW vulnerabilities
Vulnerabilities for packages: runc, scorecard, ctop, vcluster, xeol, undock, gosu, datadog-agent, docker, newrelic-infrastructure-agent, act, zarf, dagger, neuvector-scanner, k3d, k3s, containerd...
CVE-2026-88029 vulnerabilities
Vulnerabilities for packages: datadog-agent...