datadog-agent-7.79

4 results · Clear filters · Feed

• Medium 6.8
  CVE-2026-111943 Public exploit

  Distrust compromised intermediate certificates in crypto/x509

  On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a denylist was added in cr…

  Go standard library crypto/x509 renovate golang Debian Ubuntu Azure Linux Alpine Wolfi Go crates.io
  Oct 21, 2026
• High 7.5
  CVE-2026-56852 Public exploit

  Infinite loop on invalid input in golang.org/x/text

  A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

  golang.org/x/text golang.org/x/text/unicode/norm zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  Jul 21, 2026
• Medium 5.3
  CVE-2026-40179 Public exploit

  Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer

  Prometheus is an open-source monitoring system and time series database. Versions 3.0 through 3.5.1 and 3.6.0 through 3.11.1 have stored cross-site scripting vulnerabilities in multiple components of the Prometheus web UI where metric names and label values a…

  prometheus prometheus minio splunk-otel-collector Ubuntu Alpine Wolfi Go
  Apr 15, 2026
• High 7.7
  CVE-2025-47273 Public exploit

  setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

  setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to ar…

  pypa setuptools kserve-storage-controller datadog-agent-7.77 Debian Ubuntu Azure Linux Wolfi PyPI
  May 17, 2025