Skip to content
OpenAdvisories

Product · Datadog

guarddog

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-44972

    GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

    GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-readable output without escaping terminal control characters. A …

    Datadog guarddog guarddog PyPI
  • Medium 5.8
    CVE-2022-23531

    Arbitrary file write when scanning a specially-crafted local PyPI package

    GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to 0.1.5 are vulnerable to Relative Path Traversal when scanning a specially-crafted local PyPI package. Running GuardDog against a specially-crafted package can allow an attacker to w…

    Datadog guarddog guarddog PyPI
  • Medium 5.8
    CVE-2022-23530

    GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package

    GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to v0.1.8 are vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package. Extracting files using shutil.unpack_archive() from a potentially malicious tarb…

    Datadog guarddog guarddog PyPI