dd

dd Run Linux containers on macOS — with no VM. What is dd? dd runs Linux containers natively on Apple-Silicon macOS without a virtual machine. There is no Linux kernel and no hypervisor underneath: a JIT translates the container's code and services its Linux syscalls in userspace the gVisor / PRo...

CVE-2014-0160

CVE-2014-0160 Links https://github.com/DisK0nn3cT/MaltegoHeartbleed https://github.com/a0726h77/heartbleed-test https://github.com/musalbas/heartbleed-masstest https://github.com/decal/ssltest-stls https://github.com/isgroup-srl/openmagic https://github.com/offensive-python/HeartLeak Nmap nmap -s...

USN-9041-1 rust-coreutils vulnerabilities

It was discovered that uutils coreutils mkfifo incorrectly continued processing when a target file already existed, applying default permissions to the existing file. A local attacker could possibly use this issue to obtain sensitive information or modify file permissions unexpectedly...

CVE-2026-116693

A flaw was found in dd-trace. A remote attacker can cause a Denial of Service DoS by sending a specially crafted HTTP request with a malicious URL query string. The default regular expression used to obfuscate query string metadata performs excessive backtracking during evaluation, consuming high...

CLEANSTART-2026-BZ63180 dd-trace is the Datadog APM client for Node

CVE-2026-116693 affects multiple packages. dd-trace is the Datadog APM client for Node. See references for individual vulnerability details...

Fedora 45 : baresip / libre (2026-563e1454d9)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-563e1454d9 advisory. Baresip v4.12.0 2026-09-30 - Feature: Send Custom X-Headers on Outbound Calls - audio: thread-safe usage of psize and ptime in txthread - jbuf: safer jbufset...

Regular Expression Denial Of Service (ReDoS)

dd-trace is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to the default DDTRACEOBFUSCATIONQUERYSTRINGREGEXP pattern performing excessive backtracking on attacker‑controlled URL query strings, where the regex is applied synchronously while recording HTTP URL...

CVE-2026-116693

dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DDTRACEOBFUSCATIONQUERYSTRINGREGEXP can perform excessive backtracking on attacker-controlled URL query strings. The expression is applied synchronously while recording HTTP URL metadata, allowing a...

@acala-network/bodhi (>=2.7.12, <=2.7.17), @acala-network/eth-providers (>=2.7.12, <=2.7.17) +74 more potentially affected by CVE-2026-116693 via dd-trace (>=2.6.0, <=5.121.0)

dd-trace NPM version =2.6.0, =2.7.12, =2.7.12, =2.4.8, =1.1.0, =1.0.0, =2.13.47, =2.0.0, =2.13.47, =0.0.0, =0.0.1, =3.38.1 - @bufferapp/bufflog 0.5.0 - @cchandragiri/runtime-handler 1.2.2 - @ciphercross-private/nestjs-datadog 1.0.0 and more Source cves: CVE-2026-116693 Source advisory:...

GHSA-X94G-W73Q-HPCW dd-trace: ReDOS in URL query string obfuscation

Summary A regular expression used to obfuscate URL query strings can consume excessive CPU when processing certain attacker-controlled input. This can stall request processing and cause denial of service in applications using affected HTTP tracing integrations. Details The default query-string...

@acala-network/bodhi (>=2.7.12, <=2.7.17), @acala-network/eth-providers (>=2.7.12, <=2.7.17) +74 more potentially affected by CVE-2026-116693 via dd-trace (>=2.6.0, <=5.121.0)

dd-trace NPM version =2.6.0, =2.7.12, =2.7.12, =2.4.8, =1.1.0, =1.0.0, =2.13.47, =2.0.0, =2.13.47, =0.0.0, =0.0.1, =3.38.1 - @bufferapp/bufflog 0.5.0 - @cchandragiri/runtime-handler 1.2.2 - @ciphercross-private/nestjs-datadog 1.0.0 and more Source cves: CVE-2026-116693 Source advisory:...

dd-trace: ReDOS in URL query string obfuscation

Summary A regular expression used to obfuscate URL query strings can consume excessive CPU when processing certain attacker-controlled input. This can stall request processing and cause denial of service in applications using affected HTTP tracing integrations. Details The default query-string...

@datadog/electron-sdk (>=0.8.1, <=1.0.0) potentially affected by CVE-2026-116693 via dd-trace (6.10.0)

dd-trace NPM version 6.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on dd-trace and may be impacted: - @datadog/electron-sdk =0.8.1, =1.0.0 Source cves: CVE-2026-116693 Source advisory: OSV:GHSA-X94G-W73Q-HPCW...

npm: dd-trace: ReDOS in URL query string obfuscation

npm: dd-trace: ReDOS in URL query string obfuscation vulnerability discovered by ? in WordPress npm dd-trace versions = 2.0.0, 5.131.1...

@datadog/electron-sdk (>=0.8.1, <=1.0.0) potentially affected by CVE-2026-116693 via dd-trace (6.10.0)

dd-trace NPM version 6.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on dd-trace and may be impacted: - @datadog/electron-sdk =0.8.1, =1.0.0 Source cves: CVE-2026-116693 Source advisory: GHSA-X94G-W73Q-HPCW...

CVE-2026-116693 dd-trace: ReDOS in URL query string obfuscation

dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DDTRACEOBFUSCATIONQUERYSTRINGREGEXP can perform excessive backtracking on attacker-controlled URL query strings. The expression is applied synchronously while recording HTTP URL metadata, allowing a...

CVE-2026-116693

dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DDTRACEOBFUSCATIONQUERYSTRINGREGEXP can perform excessive backtracking on attacker-controlled URL query strings. The expression is applied synchronously while recording HTTP URL metadata, allowing a...

@datadog/electron-sdk (>=0.8.1, <=1.0.0) potentially affected by CVE-2026-116693 via dd-trace (6.10.0)

dd-trace NPM version 6.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on dd-trace and may be impacted: - @datadog/electron-sdk =0.8.1, =1.0.0 Source cves: CVE-2026-116693 Source advisory: MEND:CVE-2026-116693...

CVE-2026-116693 dd-trace: ReDOS in URL query string obfuscation

dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DDTRACEOBFUSCATIONQUERYSTRINGREGEXP can perform excessive backtracking on attacker-controlled URL query strings. The expression is applied synchronously while recording HTTP URL metadata, allowing a...

CVE-2026-116693

The dd-trace Datadog APM client for Node.js is vulnerable to a Regular Expression Denial of Service (ReDoS) in the URL query string obfuscation logic. Specifically, the default DD_TRACE_OBFUSCATION_QUERY_STRING_REGEXP can perform excessive backtracking when processing attacker-controlled URL quer...