538 matches found
PT-2026-49302
Name of the Vulnerable Software and Affected Versions Vector versions prior to 0.55.0 Description The ClickHouse sink contains a SQL/identifier injection flaw. The software escaped the table identifier but interpolated the database value raw into the INSERT statement, allowing a crafted database...
GHSA-QP9X-WP8F-QGJJ vulnerabilities
Vulnerabilities for packages: datadog-agent...
GHSA-QP9X-WP8F-QGJJ vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, datadog-agent...
CVE-2026-11362
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The formatevent method used by the event method does not validate the content of the tags, whi...
CVE-2026-11362
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The formatevent method used by the event method does not validate the content of the tags, whi...
CVE-2026-11362 DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The formatevent method used by the event method does not validate the content of the tags, whi...
CVE-2026-11362 DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The formatevent method used by the event method does not validate the content of the tags, whi...
CVE-2026-9270
DataDog::DogStatsd for Perl (up to version 0.07) is vulnerable to metric injections due to insufficient input sanitization in the send_stats pathway. The stat name is not stripped of newlines, enabling prefix manipulation; the value (delta) is not validated, allowing injection via set/gauge/count...
CVE-2026-9270 DataDog::DogStatsd versions through 0.07 for Perl allow metric injections
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The sendstats method does not remove newlines from metric names $stat variable, allowing attackers to change t...
DataDog::DogStatsd 安全漏洞
DataDog::DogStatsd is a Perl monitoring client library developed by DataDog Corporation that supports the DogStatsD protocol. Versions of DataDog::DogStatsd prior to 0.07 contained security vulnerabilities. These vulnerabilities stemmed from improper handling of inputs, the sendstats method not...
DataDog::DogStatsd 安全漏洞
DataDog::DogStatsD is a Perl monitoring client library developed by DataDog Corporation that supports the DogStatsD protocol. Versions of DataDog::DogStatsD prior to 0.07 contained security vulnerabilities; these vulnerabilities stemmed from improper handling of inputs, allowing for the injection...
PT-2026-46969
Name of the Vulnerable Software and Affected Versions DataDog::DogStatsd versions prior to 0.08 Description DataDog::DogStatsd does not properly sanitize input, which allows metric injections from untrusted sources. The format event method, utilized by the event method, fails to validate tag...
MAL-2026-4824 Malicious code in cdktn-provider-datadog (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce930466b101c48ae641d7e4ad57f3d5169b9f14b1e041e4264e75cbfd965b Package name cdktn-provider-datadog is a single-character variant f→n of HashiCorp's widely-used cdktf-provider-datadog CDKTF provider. README and...
Malicious code in cdktn-provider-datadog (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce930466b101c48ae641d7e4ad57f3d5169b9f14b1e041e4264e75cbfd965b Package name cdktn-provider-datadog is a single-character variant f→n of HashiCorp's widely-used cdktf-provider-datadog CDKTF provider. README and...
GHSA-MF9V-MFXR-J63J vulnerabilities
Vulnerabilities for packages: keep, openstack-kolla-toolbox-2025.1, openstack-kolla-toolbox-2026.1, wazuh-manager, dbt-bigquery, prefect-fips, pgadmin4-fips, jwt-tool, awx, keep-fips, gitlab-cng-fips, litellm, datadog-agent, py3-cassandra-medusa, mlflow, openstack-kolla-toolbox-2026.1-fips,...
CVE-2026-44431 vulnerabilities
Vulnerabilities for packages: keep, openstack-kolla-toolbox-2025.1, openstack-kolla-toolbox-2026.1, wazuh-manager, dbt-bigquery, prefect-fips, pgadmin4-fips, jwt-tool, awx, keep-fips, gitlab-cng-fips, litellm, nvidia-nsight-compute-13.1, datadog-agent, py3-cassandra-medusa, mlflow,...
GHSA-QCCP-GFCP-XXVC vulnerabilities
Vulnerabilities for packages: keep, openstack-kolla-toolbox-2025.1, openstack-kolla-toolbox-2026.1, wazuh-manager, dbt-bigquery, prefect-fips, pgadmin4-fips, jwt-tool, awx, keep-fips, gitlab-cng-fips, litellm, nvidia-nsight-compute-13.1, datadog-agent, py3-cassandra-medusa, mlflow,...
CVE-2026-44432 vulnerabilities
Vulnerabilities for packages: keep, openstack-kolla-toolbox-2025.1, openstack-kolla-toolbox-2026.1, wazuh-manager, dbt-bigquery, prefect-fips, pgadmin4-fips, jwt-tool, awx, keep-fips, gitlab-cng-fips, litellm, datadog-agent, py3-cassandra-medusa, mlflow, openstack-kolla-toolbox-2026.1-fips,...