CVE-2026-50271
2 advisories.
PyPI/ddtrace CVE-2026-50271: high 7.5, EPSS 0.79%
dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS
Action: Upgrade ddtrace to 4.8.2 or later.
pip install ddtrace==4.8.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.8.2 | - |
Fixed versions
| 4.8.2 |
Sources
- osv: GHSA-mw54-j2v2-42hr
- https://github.com/DataDog/dd-trace-py/security/advisories/GHSA-mw54-j2v2-42hr
- https://github.com/DataDog/dd-trace-py
CVE-2026-50271 · published · modified · JSON
PyPI/ddtrace CVE-2026-50271: high 7.5, EPSS 0.79%
dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS
Action: Upgrade ddtrace to 4.8.2 or later.
pip install ddtrace==4.8.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.8.2 | - |
Fixed versions
| 4.8.2 |
Sources
- osv: PYSEC-2026-3461
- https://github.com/DataDog/dd-trace-py/security/advisories/GHSA-mw54-j2v2-42hr
- https://github.com/DataDog/dd-trace-py
- https://pypi.org/project/ddtrace
- https://github.com/advisories/GHSA-mw54-j2v2-42hr
- https://nvd.nist.gov/vuln/detail/CVE-2026-50271
CVE-2026-50271 · published · modified · JSON