Skip to content
OpenAdvisories

Product · Datadog

guarddog

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2026-44971

    GuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration

    GuardDog is a CLI tool to identify malicious PyPI packages. From 1.0.0 to 2.9.0, the programmatic remote project scanning path rewrites attacker-controlled repository URLs using a blind string replacement and then sends the caller's GitHub credentials with th…

    Datadog guarddog guarddog PyPI
  • High 8.7
    CVE-2026-22871

    GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE

    GuardDog is a CLI tool to identify malicious PyPI packages. Prior to 2.7.1, there is a path traversal vulnerability exists in GuardDog's safe_extract() function that allows malicious PyPI packages to write arbitrary files outside the intended extraction direc…

    Datadog guarddog guarddog PyPI
  • High 7.1
    CVE-2026-22870

    GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS

    GuardDog is a CLI tool to identify malicious PyPI packages. Prior to 2.7.1, GuardDog's safe_extract() function does not validate decompressed file sizes when extracting ZIP archives (wheels, eggs), allowing attackers to cause denial of service through zip bom…

    Datadog guarddog guarddog PyPI