Skip to content
OpenAdvisories

Package · RubyGems

datadog

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-50276

    dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS

    dd-trace-rb is Datadog's client library for Ruby. Prior to 2.32.0, W3C baggage extraction does not enforce DD_TRACE_BAGGAGE_MAX_ITEMS, which defaults to 64, or DD_TRACE_BAGGAGE_MAX_BYTES, which defaults to 8192, although those limits apply during baggage inje…

    Datadog dd-trace-rb datadog RubyGems