datadog-agent-7.72-core-integrations

4 results · Clear filters · Feed

• Medium 4.4
  CVE-2026-25645 Public exploit

  Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

  Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is…

  psf requests open-webui katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Mar 25, 2026
• High 8.2
  CVE-2026-0994 Public exploit

  Denial of Service in Python Protobuf

  A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the int…

  Python Protobuf mysql open-webui Debian Ubuntu Azure Linux Wolfi PyPI
  Jan 23, 2026
• High 7.1
  CVE-2026-24049 Public exploit

  wheel Allows Arbitrary File Permission Modification via Path Traversal

  wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic b…

  pypa wheel open-webui katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Jan 22, 2026
• High 7.5
  CVE-2025-67221 Public exploit

  orjson does not limit recursion for deeply nested JSON documents

  The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.

  kserve-storage-controller datadog-agent-7.72-core-integrations datadog-agent-7.73-core-integrations py3.13-ambassador Wolfi PyPI
  Jan 22, 2026