Skip to content
OpenAdvisories

Product · Datadog

dd-trace-cpp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-50277

    dd-trace-cpp: Improper parsing of W3C baggage headers may lead to DoS

    dd-trace-cpp is the Datadog distributed tracing library for C++. Prior to 2.1.0, dd-trace-cpp parses incoming W3C baggage headers without enforcing DD_TRACE_BAGGAGE_MAX_ITEMS or DD_TRACE_BAGGAGE_MAX_BYTES on the extraction path, even though those limits are e…

    Datadog dd-trace-cpp
  • High 7.5
    CVE-2024-38525

    dd-trace-cpp malformed unicode header values may cause crash

    dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the `nlohmann` JSON library. However, due to the way the JSON library…

    Datadog dd-trace-cpp