ddtrace vulnerabilities
CVEs whose affected-version data names the ddtrace package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-116589High· 8.2Datadog dd-trace-py: IAST instrumentation can lead to application DOS
Datadog dd-trace-py: IAST instrumentation can lead to application DOS
▾ Twilightddtrace · ddtraceEPSS 0.33%via OSV
CVE-2026-116588High· 8.7Datadog dd-trace-py: ReDoS in URL query string obfuscation
Datadog dd-trace-py: ReDoS in URL query string obfuscation
▾ Twilightddtrace · ddtraceEPSS 0.47%via OSV
CVE-2026-50271High· 7.5dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS
dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS
▾ Twilightddtrace · ddtraceEPSS 0.79%via OSV