Skip to content
OpenAdvisories

Package · Wolfi

datadog-cluster-agent-7.77

45 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

45 results · Feed

  • High 7.5
    CVE-2026-29181

    OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)

    OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses each header field-value independently and aggregates members across values. This allows an attacker to amplify cpu and allocations…

    open-telemetry opentelemetry-go k3d aactl Ubuntu Azure Linux Wolfi Go
  • Medium 6.8
    CVE-2026-33997

    Moby: Off-by-one error in plugin privilege validation

    Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows plugins privilege validation to be bypassed during docker plugin install. Due to an error in the daemon's privilege comparison logic, t…

    moby moby zot kots Debian Ubuntu Alpine Wolfi Go
  • High 8.8
    CVE-2026-34040 Public exploit

    Moby: AuthZ plugin bypass with oversized request body

    Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.

    moby moby zot kots Debian Ubuntu Alpine Wolfi Go
  • High 7.5
    CVE-2026-27141

    Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net

    Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

    golang.org/x/net golang.org/x/net/http2 zot zarf Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 6.5
    CVE-2026-2303

    Heap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak

    The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI sta…

    MongoDB MongoDB Go Driver kubescape kubeflow-pipelines-apiserver Azure Linux Wolfi Go