DD
Product
dd-trace-py
3
CVEs
0
On KEV
8.7
Max CVSS
2
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch
Add dd-trace-py to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-116588 New | 8.7 | Oct 26 | Datadog dd-trace-py: ReDOS in URL query string obfuscation Affected: >= 1.5.0, < 3.19.9; >= 4.0.0, < 4.15.6 |
| CVE-2026-116589 New | 8.2 | Oct 26 | Datadog dd-trace-py: IAST instrumentation can lead to application DOS Affected: >= 3.13.0, < 4.15.5 |
| CVE-2026-50271 | 7.5 | Jul 17 | dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS Affected: < 4.8.2 |
Showing 3
