Lucene search
+L

13 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2026/07/15 12:0 a.m.9 views

dd-trace-go: Improper parsing of W3C baggage headers may lead to DoS

Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage injection, n...

7.5CVSS6.1AI score0.00441EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder