CVE-2024-38525 dd-trace-cpp malformed unicode header values may cause crash

dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the nlohmann JSON library. However, due to the way the JSON library is invoked, it throws an uncaught...

CVE-2024-38525

CVE-2024-38525 affects dd-trace-cpp (Datadog tracing for C++). The root cause is that when trying to extract trace context from malformed unicode, the code logs audited headers/values using the nlohmann JSON library and triggers an uncaught exception, causing a crash. The vulnerability has been p...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: terraform, tflint, trivy, conftest-fips, zot, kubescape, conftest, tfsec, terragrunt, zarf, snyk-cli, trivy-fips, kots, grype, wolfictl, k9s...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: kubescape, trivy, snyk-cli, conftest, zarf, zot, k9s, grype, terraform, tflint, wolfictl, tfsec, terragrunt, kots...

CVE-2024-6257 vulnerabilities

Vulnerabilities for packages: terraform, tflint, trivy, conftest-fips, zot, kubescape, conftest, tfsec, terragrunt, zarf, snyk-cli, trivy-fips, kots, grype, wolfictl, k9s...

Malicious code in fluent_plugin-datadog-statsd (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6903 Malicious code in fluent_plugin-datadog-statsd (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in datadog_notifications (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6857 Malicious code in datadog-proxy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in datadog_cli (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in datadog-proxy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in datadog-apm (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6856 Malicious code in datadog-apm (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chef_handler-datadog-demo (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6827 Malicious code in chef_handler-datadog-demo (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in alerty_plugin-datadog-event (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6552 Malicious code in alerty_plugin-datadog-event (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in alerty-plugin-datadog-event (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6551 Malicious code in alerty-plugin-datadog-event (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaanderen.Basisregisters.DаtaDog.Tracing.SqlStreamStore.Micrоsoft (NuGet)

--- -= Per source details. Do not edit below this line.=-...