[ Vendor · 3 CVEs ]
DataDog
CVEs affecting DataDog published in the last 30 days, plus any DataDog CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-116693 | 27 Oct 2026 | CVSS 8.7 | dd-trace: ReDOS in URL query string obfuscationdd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DD_TRACE_OBFUSCATION_QUERY_STRING_REGEXP can perform… | Fix |
| CVE-2026-116588 | 26 Oct 2026 | CVSS 8.7 | Datadog dd-trace-py: ReDoS in URL query string obfuscationDatadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, the default query-string obfuscation regular expression can… | Fix |
| CVE-2026-116589 | 26 Oct 2026 | CVSS 8.2 | Datadog dd-trace-py: IAST instrumentation can lead to application DOSDatadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST string-processing instrumentation does not properly handle… | Fix |