PT-2025-40411

Name of the Vulnerable Software and Affected Versions Flock Safety Peripheral version 7.38.3 Description The Flock Safety Peripheral application for Android contains a cleartext DataDog API key within its codebase. Attackers can recover the OAuth secret without special privileges by decompiling o...

Flock Safety Peripheral 安全漏洞

Flock Safety Peripheral is a device edge software from Flock Safety USA. A security vulnerability exists in Flock Safety Peripheral version 7.38.3, which stems from the inclusion of a plaintext DataDog API key in the code base, which could lead to key disclosure...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

This repository is a collection of proof-of-concept PoC exploits from Datadog Security Labs. The exploits are designed to demonstrate vulnerabilities in various software products, including Confluence, OpenSSL, and Spring. The repository contains code and instructions for running the exploits, as...

Linux Distros Unpatched Vulnerability : CVE-2022-3483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 before 15.4.4, all version...

Linux Distros Unpatched Vulnerability : CVE-2022-2534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions...

Linux Distros Unpatched Vulnerability : CVE-2021-22260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting...

Linux Distros Unpatched Vulnerability : CVE-2022-3018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4, a...

Malicious code in gpumon-datadog (npm)

The package gpumon-datadog was found to contain malicious code...

MAL-2025-21792 Malicious code in gpumon-datadog (npm)

The package gpumon-datadog was found to contain malicious code...

Malicious code in nestjs-datadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd646630e4e4b32350e3698792f7e678a5be4aa1167c630d0bef9cb4d491c441 The OpenSSF Package Analysis project identified 'nestjs-datadog' @ 500.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6817 Malicious code in nestjs-datadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd646630e4e4b32350e3698792f7e678a5be4aa1167c630d0bef9cb4d491c441 The OpenSSF Package Analysis project identified 'nestjs-datadog' @ 500.0.2 npm as malicious. It is considered malicious because: - The package...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: gobump, pulumi-language-java, k8s-device-plugin, polaris, helm, cluster-api-helm-controller, kubescape-operator, rancher-system-agent, kapp-controller, sbom-convert, flyte, verticadb-operator, helm-mapkubeapis, apko, render-template, op-geth, undock, containerd,...

Malicious Package

Overview datadog-instrumentations is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in datadog-instrumentations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbf74efed2b32abd010705d5410e78270b572065e8fc02c3a1961b4afc2585ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5982 Malicious code in datadog-instrumentations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbf74efed2b32abd010705d5410e78270b572065e8fc02c3a1961b4afc2585ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-WF8F-6423-GFXG vulnerabilities

Vulnerabilities for packages: druid, tez, scala, datadog-jmxfetch, spark...

CVE-2025-49128 vulnerabilities

Vulnerabilities for packages: druid, tez, scala, datadog-jmxfetch, spark...

GHSA-WF8F-6423-GFXG vulnerabilities

Vulnerabilities for packages: wso2is, druid, scala, spark-fips, hadoop-fips, tez, datadog-jmxfetch, spark, hadoop-client-modules...

CVE-2025-49128 vulnerabilities

Vulnerabilities for packages: wso2is, druid, scala, spark-fips, hadoop-fips, tez, datadog-jmxfetch, spark, hadoop-client-modules...

CVE-2023-0483

An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible for a project maintainer to extract a Datadog integration API key by modifying the site...