Lucene search
+L

1 matches found

RubySec
RubySec
•added 2026/07/15 12:00 a.m.•19 views

dd-trace-rb - Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

7.5CVSS5.7AI score0.00793EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder