Datadog security advisories

14 advisories across Datadog

Date	Advisory	Severity	Fixed in
Jul 7	Datadog SSI Injector can be used to trigger a Local Privilege Escalation in certain conditions High7.4Jul 7 CVE-2026-615810.66.0	High7.4	0.66.0
Jun 22	Unbounded W3C tracestate parsing may lead to DoS High7.5Jun 22 CVE-2026-547880.3.3	High7.5	0.3.3
Jun 9	Improper parsing of W3C baggage headers may lead to DoS High7.5Jun 9 CVE-2026-502772.1.0	High7.5	2.1.0
Jun 5	Improper parsing of W3C baggage headers may lead to DoS High7.5Jun 5 CVE-2026-502762.32.0	High7.5	2.32.0
Jun 5	Improper parsing of W3C baggage headers may lead to DoS High7.5Jun 5 CVE-2026-502742.8.1+1 more	High7.5	2.8.1+1 more
Jun 5	Improper parsing of W3C baggage headers may lead to DoS High7.5Jun 5 CVE-2026-502725.100.0	High7.5	5.100.0
Jun 5	Improper parsing of W3C baggage headers may lead to DoS High7.5Jun 5 CVE-2026-502733.43.0+1 more	High7.5	3.43.0+1 more
Jun 5	Improper parsing of W3C baggage headers may lead to DoS High7.5Jun 5 CVE-2026-502714.8.2	High7.5	4.8.2
Jun 5	Improper parsing of W3C baggage headers may lead to DoS High7.5Jun 5 CVE-2026-502701.62.0	High7.5	1.62.0
Jun 5	Improper parsing of W3C baggage headers may lead to DoS High7.5Jun 5 CVE-2026-502751.19.2	High7.5	1.19.2
Mar 23	Unsafe deserialization in dd-trace-java RMI instrumentation may lead to remote code execution Critical9.3Mar 23 CVE-2026-337281.60.3	Critical9.3	1.60.3
Nov 112025	Datadog Linux Host Agent affected by local privilege escalation due to insufficient pycache permissions High7.0Nov 11, 2025 CVE-2025-616677.71.0	High7.0	7.71.0
Jun 272024	Malformed unicode header values may throw uncaught exception Medium6.2Jun 27, 2024 CVE-2024-38525v0.2.2	Medium6.2	v0.2.2
Feb 242021	DataDog API Client contains a Local Information Disclosure Vulnerability LowFeb 24, 2021 CVE-2021-213311.0.0-beta.9	Low	1.0.0-beta.9

About Datadog

Datadog, Inc. is an American company that provides an observability service for cloud-scale applications, providing monitoring of servers, databases, tools, and services, through a SaaS-based data analytics platform.

Elsewhere on fru.dev: Acquisitions · Quarterly · Paydays · Releases · TechConf

Critical advisories by email