CVE-2026-116589

The Datadog dd-trace-py Python APM client (versions 3.13.0 through 4.15.5 ) contains a vulnerability in its IAST string-processing instrumentation . The root cause is the failure to properly handle internal errors during old-style % string formatting when processing attacker-controlled input. If ...