Login Request a demo
DA
Vendor
DataDog
13 products with CVEs on record
28
CVEs
0
On KEV
3
New 30D
Products
DD
dd-trace-py
DataDog
8.7
3 CVEs0 on KEV2 new
DD
dd-trace-js
DataDog
8.7
2 CVEs0 on KEV1 new
AA
Android App
Datadog
6.5
6 CVEs0 on KEV0 new
GU
guarddog
DataDog
9.8
6 CVEs0 on KEV0 new
DD
dd-trace-cpp
DataDog
7.5
2 CVEs0 on KEV0 new
DD
dd-trace-java
DataDog
9.8
2 CVEs0 on KEV0 new
DA
datadog-agent
DataDog
7.0
1 CVEs0 on KEV0 new
DD
dd-trace-dotnet
DataDog
7.5
1 CVEs0 on KEV0 new
DD
dd-trace-go
DataDog
7.5
1 CVEs0 on KEV0 new
DD
dd-trace-php
DataDog
7.5
1 CVEs0 on KEV0 new
DD
dd-trace-rb
DataDog
7.5
1 CVEs0 on KEV0 new
DD
dd-trace-rs
DataDog
7.5
1 CVEs0 on KEV0 new
IM
import-in-the-middle
DataDog
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116693
New
DD
dd-trace-js
DataDog
8.7
0%
Oct 27dd-trace: ReDOS in URL query string obfuscation
CVE-2026-116589
New
DD
dd-trace-py
DataDog
8.2
0%
Oct 26Datadog dd-trace-py: IAST instrumentation can lead to application DOS
CVE-2026-116588
New
DD
dd-trace-py
DataDog
8.7
0%
Oct 26Datadog dd-trace-py: ReDOS in URL query string obfuscation
CVE-2026-50277
DD
dd-trace-cpp
DataDog
7.5
1%
Sep 17dd-trace-cpp: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-50275
DD
dd-trace-php
DataDog
7.5
1%
Sep 17Datadog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-50276
DD
dd-trace-rb
DataDog
7.5
1%
Sep 14dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-50270
DD
dd-trace-java
DataDog
7.5
1%
Sep 14dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-54788
DD
dd-trace-rs
DataDog
7.5
1%
Aug 28dd-trace-rs: Unbounded W3C tracestate parsing may lead to DoS
CVE-2026-44965
AA
Android App
Datadog
5.5
0%
Aug 7In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActivity, MonitorSavedViewWidgetActivity,…
CVE-2026-44964
AA
Android App
Datadog
6.5
0%
Aug 7In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard
CVE-2026-47364
AA
Android App
Datadog
6.5
0%
Aug 7In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out
CVE-2026-47363
AA
Android App
Datadog
6.3
0%
Aug 7In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session (including OAuth tokens) from…
CVE-2026-47361
AA
Android App
Datadog
6.4
0%
Aug 7In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied…
CVE-2026-47362
AA
Android App
Datadog
4.6
0%
Aug 7In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase (notification…
CVE-2026-50271
DD
dd-trace-py
DataDog
7.5
1%
Jul 17dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-50274
DD
dd-trace-go
DataDog
7.5
1%
Jul 17dd-trace-go: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-50272
DD
dd-trace-js
DataDog
7.5
1%
Jul 17dd-trace: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-50273
DD
dd-trace-dotnet
DataDog
7.5
1%
Jul 17Datadog .NET Tracer: Improper parsing of W3C baggage headers may lead to DoS
CVE-2026-44971
GU
guarddog
DataDog
8.2
0%
May 27GuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration
CVE-2026-44972
GU
guarddog
DataDog
5.0
0%
May 27GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content
CVE-2026-33728
DD
dd-trace-java
DataDog
9.8
1%
Mar 27dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution
CVE-2026-22871
GU
guarddog
DataDog
9.8
1%
Jan 13GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
CVE-2026-22870
GU
guarddog
DataDog
7.5
1%
Jan 13GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
CVE-2025-61667
DA
datadog-agent
DataDog
7.0
0%
Nov 12Datadog Linux Host Agent affected by local privilege escalation due to insufficient pycache permissions
CVE-2024-38525
DD
dd-trace-cpp
DataDog
7.5
0%
Jun 28dd-trace-cpp malformed unicode header values may cause crash
CVE-2023-38704
IM
import-in-the-middle
DataDog
9.8
1%
Aug 7import-in-the-middle allows unsanitized user controlled input in module generation
CVE-2022-23531
GU
guarddog
DataDog
7.8
1%
Dec 16Arbitrary file write when scanning a specially-crafted local PyPI package
CVE-2022-23530
GU
guarddog
DataDog
6.5
1%
Dec 16GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package