DataDog guarddog vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20264

Newest CVEs

• CVE-2026-44971

  GuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration

  DataDog · guarddog

  High8.2
• CVE-2026-44972

  GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

  DataDog · guarddog

  Medium5.0
• CVE-2026-22871

  GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE

  DataDog · guarddog

  High8.7
• CVE-2026-22870

  GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS

  DataDog · guarddog

  High7.1
• CVE-2022-23531

  Arbitrary file write when scanning a specially-crafted local PyPI package

  DataDog · guarddog

  Medium5.8
• CVE-2022-23530

  GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package

  DataDog · guarddog

  Medium5.8