Datadog vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20222
3. 20231
4. 20241
5. 20251
6. 202623

Newest CVEs

• CVE-2026-116693

  dd-trace: ReDOS in URL query string obfuscation

  DataDog · dd-trace-js

  High8.7
• CVE-2026-116589

  Datadog dd-trace-py: IAST instrumentation can lead to application DOS

  DataDog · dd-trace-py

  High8.2
• CVE-2026-116588

  Datadog dd-trace-py: ReDOS in URL query string obfuscation

  DataDog · dd-trace-py

  High8.7
• CVE-2026-50277

  dd-trace-cpp: Improper parsing of W3C baggage headers may lead to DoS

  DataDog · dd-trace-cpp

  High7.5
• CVE-2026-50275

  Datadog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoS

  DataDog · dd-trace-php

  High7.5
• CVE-2026-50276

  dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS

  DataDog · dd-trace-rb

  High7.5
• CVE-2026-50270

  dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS

  DataDog · dd-trace-java

  High7.5
• CVE-2026-54788

  dd-trace-rs: Unbounded W3C tracestate parsing may lead to DoS

  DataDog · dd-trace-rs

  High7.5
• CVE-2026-44965

  In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActivity,…

  Datadog · Android App

  Medium5.5
• CVE-2026-44964

  In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed…

  Datadog · Android App

  Medium6.5