Login Request a demo
GU
Product
guarddog
by DataDog · last CVE May 27, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 3Medium 2Low 0
Severity
All severities6Critical1High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add guarddog to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-22871
9.8
1%
Jan 13
GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
Affected: < 2.7.1
CVE-2026-44971
8.2
0%
May 27
GuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration
Affected: >= 1.0.0, <= 2.9.0
CVE-2022-23531
7.8
1%
Dec 16
Arbitrary file write when scanning a specially-crafted local PyPI package
Affected: < 0.1.5
CVE-2026-22870
7.5
1%
Jan 13
GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
Affected: < 2.7.1
CVE-2022-23530
6.5
1%
Dec 16
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Affected: < 0.1.8
CVE-2026-44972
5.0
0%
May 27
GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content
Affected: >= 2.6.0, <= 2.9.0
Showing 6