https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 15:32:55 +0000 https://db.gcve.eu/vuln/cleanstart-2026-es07258 <p><strong>Affected:</strong> CleanStart: kubernetes-dns-node-cache</p> <p>Security vulnerability affects the kubernetes-dns-node-cache package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: kubernetes-dns-node-cache</p> <p>Security vulnerability affects the kubernetes-dns-node-cache package. This issue is resolved in later releases. See references for vulnerability details.</p> https://db.gcve.eu/vuln/cleanstart-2026-es07258 https://db.gcve.eu/vuln/cve-2026-50274 <p><strong>Affected:</strong> DataDog dd-trace-go</p> <p>Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. Prior to 2.8.1, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DD_TRACE_BAGGAGE_MAX_ITEMS or DD_TRACE_BAGGAGE_MAX_BYTES limits on the extract path. A remote, unauthenticated attacker can send a request whose baggage header contains an arbitrarily large number of comma-separated key-value pairs or a single very large value, causing unbounded CPU and memory consumption and enabling a remote denial of service against HTTP services with baggage propagation enabled. This issue is fixed in version 2.8.1.</p> <p><strong>Affected:</strong> DataDog dd-trace-go</p> <p>Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. Prior to 2.8.1, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DD_TRACE_BAGGAGE_MAX_ITEMS or DD_TRACE_BAGGAGE_MAX_BYTES limits on the extract path. A remote, unauthenticated attacker can send a request whose baggage header contains an arbitrarily large number of comma-separated key-value pairs or a single very large value, causing unbounded CPU and memory consumption and enabling a remote denial of service against HTTP services with baggage propagation enabled. This issue is fixed in version 2.8.1.</p> https://db.gcve.eu/vuln/cve-2026-50274