dd-trace vulnerabilities
CVEs whose affected-version data names the dd-trace package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-116693High· 8.7dd-trace: ReDOS in URL query string obfuscation
dd-trace: ReDOS in URL query string obfuscation
▾ Twilightdd-trace · dd-tracevia GHSA
CVE-2026-50272High· 7.5dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS
dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS
▾ Twilightdd-trace · dd-traceEPSS 0.79%via GHSA