Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2026/08/28 4:35 p.m.9 views

datadog-opentelemetry has unbounded W3C tracestate parsing that may lead to DoS

Impact Datadog tracing libraries that implement W3C Trace Context tracecontext propagation parse the incoming tracestate header without enforcing a size cap on the Datadog vendor entry dd=.... The dd= value contains semicolon-separated key:value pairs, and the parser allocates a hash-map entry fo...

7.5CVSS5.9AI score
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/01/21 1:05 a.m.18 views

Swift W3C TraceContext vulnerable to a malformed HTTP header causing a crash

Impact A denial-of-service vulnerability due to improper input validation allows a remote attacker to crash the service via a malformed HTTP header. Allows crashing the process with data coming from the network when used with, for example, an HTTP server. Most common way of using Swift W3C Trace...

5.3CVSS5.7AI score0.00407EPSS
SaveExploits0References6Affected Software2
NVD
NVD
added 2026/01/19 9:15 p.m.12 views

CVE-2026-23886

Swift W3C TraceContext is a Swift implementation of the W3C Trace Context standard, and Swift OTel is an OpenTelemetry Protocol OTLP backend for Swift Log, Swift Metrics, and Swift Distributed Tracing. Prior to Swift W3C TraceContext version 1.0.0-beta.5 and Swift OTel version 1.0.4, a...

5.3CVSS0.00407EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/19 9:01 p.m.25 views

CVE-2026-23886

The CVE-2026-23886 affects the Swift W3C TraceContext component and the Swift OTel OTLP backend when used together; versions prior to 1.0.0-beta.5 (TraceContext) and 1.0.4 (OTel) are vulnerable to a denial-of-service via malformed HTTP headers that fail input validation and can crash the process ...

5.3CVSS5.7AI score0.00407EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/19 9:01 p.m.7 views

CVE-2026-23886

Swift W3C TraceContext is a Swift implementation of the W3C Trace Context standard, and Swift OTel is an OpenTelemetry Protocol OTLP backend for Swift Log, Swift Metrics, and Swift Distributed Tracing. Prior to Swift W3C TraceContext version 1.0.0-beta.5 and Swift OTel version 1.0.4, a...

5.3CVSS5.7AI score0.00407EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/09/04 12:00 a.m.41 views

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2020:2461-1)

This update for java-180-ibm fixes the following issues : Update to Java 8.0 Service Refresh 6 Fix Pack 15 bsc1175259, bsc1174157 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583 CVE-2019-17639 - Class Libraries : -...

8.3CVSS6.2AI score0.0435EPSS
SaveExploits0References21
Rows per page
Query Builder