Lucene search
+L

37 matches found

RubySec
RubySec
added 2026/07/15 12:00 a.m.13 views

dd-trace-rb - Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

7.5CVSS5.3AI score0.00759EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder