Product

Dd-Trace-Rb < 2.32.0

1 brief RSS

dd-trace-rb: Improper Parsing of W3C Baggage Headers Leads to DoS

A vulnerability (CVE-2026-50276) in Datadog tracing libraries, specifically `dd-trace-rb` versions prior to 2.32.0, allows a remote and unauthenticated attacker to perform a Denial of Service (DoS) by sending HTTP requests with malformed W3C baggage headers, leading to unbounded CPU and memory consumption.

dd-trace-rb < 2.32.0 denial-of-service vulnerability ruby web

1t 1h ago