CVE-2026-116589

A flaw was found in ddtrace. This issue allows a remote attacker to cause a denial of service DoS when Interactive Application Security Testing IAST is enabled. Specifically, the string-processing instrumentation fails to handle internal errors during old-style string formatting operations. By...

ROOT-APP-PYPI-CVE-2026-50271 CVE-2026-50271 in ddtrace - Patched by Root

Root has patched CVE-2026-50271 in the ddtrace package for Root:PyPI. Multiple fixed versions available...

bk-plugin-framework (>=2.3.0rc1, <=2.4.0rc0), bk-plugin-runtime (>=2.1.0rc1, <=2.2.0rc0) potentially affected by CVE-2026-50271 via ddtrace (0.14.1)

ddtrace PYPI version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - bk-plugin-framework =2.3.0rc1, =2.1.0rc1, =2.2.0rc0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

dh-potluck (0.1.3) potentially affected by CVE-2026-50271 via ddtrace (0.25.0)

ddtrace PYPI version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - dh-potluck 0.1.3 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

aio-pika-rpc (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-50271 via ddtrace (0.29.0)

ddtrace PYPI version 0.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aio-pika-rpc =1.0.0, =1.0.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

aio-pika-rpc (1.1.0), datadog-lambda (0.10.0) potentially affected by CVE-2026-50271 via ddtrace (0.30.2)

ddtrace PYPI version 0.30.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aio-pika-rpc 1.1.0 - datadog-lambda 0.10.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (2.14.0), ddtrace-aiomisc (>=1.0.0, <=1.0.2) potentially affected by CVE-2026-50271 via ddtrace (0.31.0)

ddtrace PYPI version 0.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 2.14.0 - ddtrace-aiomisc =1.0.0, =1.0.2 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (2.16.0) potentially affected by CVE-2026-50271 via ddtrace (0.36.0)

ddtrace PYPI version 0.36.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 2.16.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

pyshuttlis (0.1.53), shuttlis (0.1.53) potentially affected by CVE-2026-50271 via ddtrace (0.36.1)

ddtrace PYPI version 0.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - pyshuttlis 0.1.53 - shuttlis 0.1.53 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

example-pkg-naturalett (>=6.0.0, <=12.6.0) potentially affected by CVE-2026-50271 via ddtrace (0.37.0)

ddtrace PYPI version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - example-pkg-naturalett =6.0.0, =12.6.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=2.19.0, <=2.21.0) potentially affected by CVE-2026-50271 via ddtrace (0.40.0)

ddtrace PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =2.19.0, =2.21.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (2.24.0) potentially affected by CVE-2026-50271 via ddtrace (0.41.2)

ddtrace PYPI version 0.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 2.24.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (2.26.0), pinecone-client (>=0.7.5, <=0.8.59) potentially affected by CVE-2026-50271 via ddtrace (0.44.0)

ddtrace PYPI version 0.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 2.26.0 - pinecone-client =0.7.5, =0.8.59 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=2.27.0, <=3.31.0) potentially affected by CVE-2026-50271 via ddtrace (0.45.0)

ddtrace PYPI version 0.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =2.27.0, =3.31.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

opentelemetry-exporter-datadog (>=0.20.0b0, <=0.30.0b0) potentially affected by CVE-2026-50271 via ddtrace (0.46.0)

ddtrace PYPI version 0.46.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - opentelemetry-exporter-datadog =0.20.0b0, =0.30.0b0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (>=3.33.0, <=3.41.0) potentially affected by CVE-2026-50271 via ddtrace (0.48.0)

ddtrace PYPI version 0.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda =3.33.0, =3.41.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

aioradio (>=0.13.14, <=0.14.2) potentially affected by CVE-2026-50271 via ddtrace (0.50.1)

ddtrace PYPI version 0.50.1 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aioradio =0.13.14, =0.14.2 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

aioradio (>=0.14.3, <=0.14.4) potentially affected by CVE-2026-50271 via ddtrace (0.50.3)

ddtrace PYPI version 0.50.3 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - aioradio =0.14.3, =0.14.4 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-lambda (3.49.0) potentially affected by CVE-2026-50271 via ddtrace (0.53.0)

ddtrace PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-lambda 3.49.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...

datadog-checks-base (>=25.0.0, <=32.5.1) potentially affected by CVE-2026-50271 via ddtrace (0.53.2)

ddtrace PYPI version 0.53.2 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - datadog-checks-base =25.0.0, =32.5.1 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...