CVEs for Datadog
21 matching vulnerabilities, 0 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-50277 dd-trace-cpp: Improper parsing of W3C baggage headers may lead to DoS
CVSS 7.5 highEPSS 0.79%Datadog
CVE-2026-50275 Datadog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoS
CVSS 7.5 highEPSS 0.68%Datadog
CVE-2026-50276 dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS
CVSS 7.5 highEPSS 0.79%Datadog
CVE-2026-50270 dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS
CVSS 7.5 highEPSS 0.79%Datadog
CVE-2026-54788 dd-trace-rs: Unbounded W3C tracestate parsing may lead to DoS
CVSS 7.5 highEPSS 0.79%Datadog
CVSS 5.5 mediumEPSS 0.16%Datadog
CVSS 6.5 mediumEPSS 0.34%Datadog
CVSS 6.5 mediumEPSS 0.44%Datadog
CVSS 6.3 mediumEPSS 0.26%Datadog
CVSS 6.4 mediumEPSS 0.29%Datadog
CVSS 4.6 mediumEPSS 0.24%Datadog
CVE-2026-50271 dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS
CVSS 7.5 highEPSS 0.79%Datadog
CVE-2026-50274 dd-trace-go: Improper parsing of W3C baggage headers may lead to DoS
CVSS 7.5 highEPSS 0.79%Datadog
CVE-2026-50272 dd-trace: Improper parsing of W3C baggage headers may lead to DoS
CVSS 7.5 highEPSS 0.79%Datadog
CVE-2026-22871 GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
CVSS 9.8 criticalEPSS 1.1%Datadog
CVE-2026-22870 GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
CVSS 7.5 highEPSS 0.51%Datadog
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)