CVE-2026-54788
1 advisory.
crates.io/datadog-opentelemetry CVE-2026-54788: high 7.5
datadog-opentelemetry has unbounded W3C tracestate parsing that may lead to DoS
Action: Upgrade datadog-opentelemetry to 0.3.3 or later.
cargo update -p datadog-opentelemetry --precise 0.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.0 | 0.3.3 | - |
Fixed versions
| 0.3.3 |
Sources
- osv: GHSA-gpwf-4h98-v82q
- https://github.com/DataDog/dd-trace-rs/security/advisories/GHSA-gpwf-4h98-v82q
- https://github.com/DataDog/dd-trace-rs/pull/218
- https://github.com/DataDog/dd-trace-rs/commit/77c5d185c71d0ea8103da0e6cf4cd50677ffacd2
- https://github.com/DataDog/dd-trace-rs
- https://github.com/DataDog/dd-trace-rs/releases/tag/datadog-opentelemetry-v0.3.3
CVE-2026-54788 · published · modified · JSON