dd-trace-rb vulnerabilities

1 known vulnerability in dd-trace-rb from DataDog. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  dd-trace-rb: Allocation of Resources Without Limits or Throttling

  CVE-2026-50276Sep 14, 2026DataDog

  dd-trace-rb is Datadog's client library for Ruby. Prior to 2.32.0, W3C baggage extraction does not enforce DD_TRACE_BAGGAGE_MAX_ITEMS, which defaults to 64, or DD_TRACE_BAGGAGE_MAX_BYTES, which defaults to 8192, although those limits apply during baggage injec