Skip to content
OpenAdvisories

Package · Wolfi

datadog-agent-7.77-full

44 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

44 results · Feed

  • High 7.5
    CVE-2026-29181

    OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses each header field-value independently and aggregates members across values. This allows an attacker to amplify cpu and allocations…

    open-telemetry opentelemetry-go k3d aactl Ubuntu Azure Linux Wolfi Go
  • Medium 6.8
    CVE-2026-33997

    Moby: Off-by-one error in plugin privilege validation

    Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, t…

    moby moby zot kots Debian Ubuntu Alpine Wolfi Go
  • High 8.8
    CVE-2026-34040 Public exploit

    Moby: AuthZ plugin bypass with oversized request body

    Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.

    moby moby zot kots Debian Ubuntu Alpine Wolfi Go
  • High 7.5
    CVE-2026-32287

    Infinite loop in github.com/antchfx/xpath

    Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".

    github.com/antchfx/xpath github.com/antchfx/xpath nuclei telegraf Debian Ubuntu Azure Linux Wolfi Go