https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T15:32:58.703991+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cleanstart-2026-es07258 CLEANSTART-2026-ES07258 — Security fix for GHSA-74j5-xf3v-crq8 applied in: kubernetes-dns-node-cache 1.26.8-r6 2026-10-23T15:32:58.707035+00:00

Affected: CleanStart: kubernetes-dns-node-cache

Security vulnerability affects the kubernetes-dns-node-cache package. This issue is resolved in later releases. See references for vulnerability details.

 https://db.gcve.eu/vuln/cve-2026-50274 CVE-2026-50274 — dd-trace-go: Improper parsing of W3C baggage headers may lead to DoS 2026-10-23T15:32:58.707111+00:00

Affected: DataDog dd-trace-go

Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. Prior to 2.8.1, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DD_TRACE_BAGGAGE_MAX_ITEMS or DD_TRACE_BAGGAGE_MAX_BYTES limits on the extract path. A remote, unauthenticated attacker can send a request whose baggage header contains an arbitrarily large number of comma-separated key-value pairs or a single very large value, causing unbounded CPU and memory consumption and enabling a remote denial of service against HTTP services with baggage propagation enabled. This issue is fixed in version 2.8.1.