GHSA-38wr-vpc7-2mp4Published
Datadog .NET Tracer: Improper parsing of W3C baggage headers may lead to DoS
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-50273 · Microsoft / collected KEV context
cve-program · CVE-2026-50273
- https://github.com/DataDog/dd-trace-dotnet/security/advisories/GHSA-38wr-vpc7-2mp4
- https://github.com/DataDog/dd-trace-dotnet/pull/8555
- https://github.com/DataDog/dd-trace-dotnet/commit/38092e0d41a36decbe649e048e48ae1b1607292f
- https://github.com/DataDog/dd-trace-dotnet/releases/tag/v3.43.0
nvd · CVE-2026-50273
- https://github.com/DataDog/dd-trace-dotnet/commit/38092e0d41a36decbe649e048e48ae1b1607292f
- https://github.com/DataDog/dd-trace-dotnet/pull/8555
- https://github.com/DataDog/dd-trace-dotnet/releases/tag/v3.43.0
- https://github.com/DataDog/dd-trace-dotnet/security/advisories/GHSA-38wr-vpc7-2mp4
osv · GHSA-38wr-vpc7-2mp4
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.