CVE-2024-36129 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, opentelemetry-collector, opentelemetry-collector-fips, tempo-fips, tempo...

GHSA-C74F-6MFW-MM4V vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, opentelemetry-collector, opentelemetry-collector-fips, tempo-fips, tempo...

GHSA-V9HF-5J83-6XPP vulnerabilities

Vulnerabilities for packages: py3-pymysql...

CVE-2024-36039 vulnerabilities

Vulnerabilities for packages: py3-pymysql...

CVE-2024-35195 vulnerabilities

Vulnerabilities for packages: airflow, k8s-sidecar, kubeflow-pipelines-visualization-server, az, confluent-docker-utils, kubeflow-jupyter-web-app, kubeflow-katib, nvidia-nsight-compute-13.1, checkov, kubeflow-pipelines, superset, reflex, py3-torchvision-cuda-11.8, apache-beam-python-3.11-sdk,...

Security Bypass

datadog/dd-trace is vulnerable to Security Bypass. The vulnerability is due to insufficient constraint on the ddtrace.requestinithook by the openbasedir INI directive, which allows an attacker to bypass the openbasedir INI directive...

GitLab 13.7 < 14.0.9 / 14.1 < 14.1.4 / 14.2 < 14.2.2 (CVE-2021-22260)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions...

datadog/dd-trace Circumvents open_basedir INI directive

datadog/dd-trace versions 0.30.0 prior to 0.30.2 are affected by a security and stability issue outlined in PR 579. This pull request ensures that the ddtrace.requestinithook remains bound by the openbasedir INI directive, effectively addressing potential vulnerabilities related to openbasedir...

GHSA-QVGG-R6RQ-VWFX datadog/dd-trace Circumvents open_basedir INI directive

datadog/dd-trace versions 0.30.0 prior to 0.30.2 are affected by a security and stability issue outlined in PR 579. This pull request ensures that the ddtrace.requestinithook remains bound by the openbasedir INI directive, effectively addressing potential vulnerabilities related to openbasedir...

PT-2024-40441 · Datadog · Datadog/Dd-Trace

Name of the Vulnerable Software and Affected Versions: datadog/dd-trace versions 0.30.0 through 0.30.1 Description: The issue concerns a security and stability problem where the ddtrace.request init hook was not properly bound by the open basedir INI directive, potentially leading to...

GHSA-MR82-8J83-VXMV vulnerabilities

Vulnerabilities for packages: datadog-agent...

GHSA-MR82-8J83-VXMV vulnerabilities

Vulnerabilities for packages: datadog-agent...

CVE-2024-3772 vulnerabilities

Vulnerabilities for packages: datadog-agent...

CVE-2024-3772 vulnerabilities

Vulnerabilities for packages: datadog-agent...

GHSA-RHH4-RH7C-7R5V vulnerabilities

Vulnerabilities for packages: zarf, terragrunt, nuclei, k9s, kots, kubescape, filebrowser, wolfictl...

CVE-2024-0406 vulnerabilities

Vulnerabilities for packages: zarf, terragrunt, nuclei, k9s, kots, kubescape, filebrowser, wolfictl...

CVE-2024-0406 vulnerabilities

Vulnerabilities for packages: gotenberg, nuclei, zarf, mattermost-fips, wolfictl, chainctl, kubescape, vault, terragrunt, k9s, kots, mattermost, filebrowser...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: aactl, wolfictl, kubescape, conftest, buf, tkn, kaniko, grype, ctop, prometheus, syft, docker-compose, zot, cadvisor, buildkitd, conftest-fips, crossplane, melange, ko, trivy, loki, dagger, kargo, spire-server, cilium-cli, up, spire-server-fips, cadvisor-fips...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: aactl, wolfictl, kubescape, conftest, buf, tkn, kaniko, grype, ctop, prometheus, syft, docker-compose, zot, cadvisor, buildkitd, conftest-fips, crossplane, melange, ko, trivy, loki, dagger, kargo, spire-server, cilium-cli, up, spire-server-fips, cadvisor-fips...

BIT-GITLAB-2021-22260

A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 allows an attacker to execute arbitrary JavaScript code on the...