datadoghq records
8 published records for vendor datadoghq.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 87.5%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-23 Relative Path Traversal1
- CWE-378 Creation of Temporary File With Insecure Permissions1
- CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)1
- CWE-522 Insufficiently Protected Credentials1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-38704No exploit | import-in-the-middle allows unsanitized user controlled input in module generationdatadoghq · import-in-the-middle · CWE-20 | Critical9.8 | — | 1.0% | Aug 7, 2023 |
34Monitor | CVE-2026-22871No exploit | GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCEdatadoghq · guarddog · CWE-22 | High8.7 | — | 1.0% | Jan 13, 2026 |
32Monitor | CVE-2019-3800No exploit | CF CLI writes the client id and secret to config filepivotal · cloud foundry command line interface · CWE-522 | High7.8 | — | 2.0% | Aug 5, 2019 |
31Monitor | CVE-2022-23531No exploit | Arbitrary file write when scanning a specially-crafted local PyPI packagedatadoghq · guarddog · CWE-23 | High7.8 | — | 0.7% | Dec 16, 2022 |
30Monitor | CVE-2024-38525No exploit | dd-trace-cpp malformed unicode header values may cause crashdatadog · dd-trace-cpp · CWE-20 | High7.5 | — | 0.4% | Jun 28, 2024 |
28Monitor | CVE-2026-22870No exploit | GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoSdatadoghq · guarddog · CWE-409 | High7.1 | — | 0.5% | Jan 13, 2026 |
26Monitor | CVE-2022-23530No exploit | GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI packagedatadoghq · guarddog · CWE-22 | Medium6.5 | — | 0.7% | Dec 16, 2022 |
13Monitor | CVE-2021-21331No exploit | DataDog API Client contains a Local Information Disclosure Vulnerabilitydatadoghq · datadog-api-client-java · CWE-378 | Low3.3 | — | 0.6% | Mar 3, 2021 |
- CVE-2023-3870439Monitor
import-in-the-middle allows unsanitized user controlled input in module generation
CriticalCVSS 9.8No exploitEPSS 1%datadoghq · import-in-the-middleAug 7, 2023
- CVE-2026-2287134Monitor
GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
HighCVSS 8.7No exploitEPSS 1%datadoghq · guarddogJan 13, 2026
- CVE-2019-380032Monitor
CF CLI writes the client id and secret to config file
HighCVSS 7.8No exploitEPSS 2%pivotal · cloud foundry command line interfaceAug 5, 2019
- CVE-2022-2353131Monitor
Arbitrary file write when scanning a specially-crafted local PyPI package
HighCVSS 7.8No exploitEPSS 0%datadoghq · guarddogDec 16, 2022
- CVE-2024-3852530Monitor
dd-trace-cpp malformed unicode header values may cause crash
HighCVSS 7.5No exploitEPSS 0%datadog · dd-trace-cppJun 28, 2024
- CVE-2026-2287028Monitor
GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
HighCVSS 7.1No exploitEPSS 0%datadoghq · guarddogJan 13, 2026
- CVE-2022-2353026Monitor
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
MediumCVSS 6.5No exploitEPSS 0%datadoghq · guarddogDec 16, 2022
- CVE-2021-2133113Monitor
DataDog API Client contains a Local Information Disclosure Vulnerability
LowCVSS 3.3No exploitEPSS 0%datadoghq · datadog-api-client-javaMar 3, 2021