DD
Product
dd-trace-js
by DataDog · last CVE Oct 27, 2026
2
CVEs
0
On KEV
8.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add dd-trace-js to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116693
New
8.7–Oct 27
dd-trace: ReDOS in URL query string obfuscation
Affected: >= 2.0.0, < 5.131.1; >= 6.0.0, < 6.20.1
CVE-2026-50272
7.5
1%
Jul 17
dd-trace: Improper parsing of W3C baggage headers may lead to DoS
Affected: < 5.100.0
Showing 2