Skip to main content

News Investors Questionnaires Developer Help

AnonymousSign in

0-Doubt — neutral IT/Security research

Browse Resellers Certified analysts RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API

Datadog Cloud Security — 0-Doubt

Home
Datadog
Datadog Cloud Security

Datadog Cloud Security

AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 30 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~54 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Cloud security platform with CSPM, CIEM, vulnerability mgmt, and compliance

by Datadog · datadoghq.com · source ↗

Screenshots

1

Datadog Cloud Security — screenshot

Known CVEs (30)8 new

CVE-2026-63466 ↗MEDIUM 4.1new2026
Unleash is an open-source feature management platform. Prior to 8.0.3, FeatureEventFormatterMd.format in src/lib/addons/feature-event-formatter-md.ts assigns Mustache.escape to an identity function be…
CVE-2026-63004 ↗MEDIUM 5.5new2026
Unleash is an open-source feature management platform. Prior to 7.5.2, 7.6.5, and 8.0.2, the addon and integration subsystem passes the operator-controlled parameters.url value from src/lib/addons/web…
CVE-2026-47364 ↗MEDIUM 6.5

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Cloud-Native Application Protection (CNAPP) products

ARMO · ARMO
ARMO Cloud Application Detection & Response · ARMO
ARMO Continuous Cloud Security Posture Management · ARMO
ARMO Kubernetes Security Posture Management · ARMO
ARMO Runtime-based Cloud Hardening & Remediation · ARMO
ARMO Vulnerability Management · ARMO
AccuKnox 5G Security (5GNAPP) · AccuKnox
AccuKnox Application Security · AccuKnox

new

2026

In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user-facing opt-out. Impact: The Datadog user UUID and crash …

CVE-2026-47363 ↗MEDIUM 6.3new2026

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session (including OAuth tokens) from Intent extras with no …

CVE-2026-47362 ↗MEDIUM 4.6new2026

In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase (notification title, message, recip…

CVE-2026-47361 ↗MEDIUM 6.4new2026

In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied conversation_id. When the a…

CVE-2026-44965 ↗MEDIUM 5.5new2026

In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShiftsWidgetActivity, OnCallP…

CVE-2026-44964 ↗MEDIUM 6.5new2026

In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed application can launch it with attacker-con…

CVE-2026-50274 ↗HIGH 7.52026

Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. Prior to 2.8.1, Datadog tracing libraries that implement W3C baggage prop…

CVE-2026-50272 ↗HIGH 7.52026

dd-trace is the Datadog APM client for Node.js. Prior to 5.100.0, W3C baggage propagation in packages/dd-trace/src/baggage.js and packages/dd-trace/src/opentracing/propagation/text_map.js parsed incom…

CVE-2026-50271 ↗HIGH 7.52026

Datadog dd-trace-py is the Datadog Python APM client. Prior to 4.8.2, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DD_TRACE_BA…

CVE-2026-50273 ↗HIGH 7.52026

Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers wit…

CVE-2026-57522 ↗LOW 3.52026

Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens(), which substitutes user-controlled values into event-integration templates with…

CVE-2026-39197 ↗MEDIUM 6.52026

An issue in the /util/http/prelude.rs endpoint of Datadog, Inc Vector v0.54.0 allows attackers to cause a Denial of Service (DoS) via a crafted request or payload.

CVE-2026-39196 ↗CRITICAL 9.82026

Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the set_uri_query parameter in the KeyPartitioner::partition function. This vulnerability allows attackers to acc…

CVE-2026-9270 ↗CRITICAL 9.12026

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The send_st…

CVE-2026-11362 ↗CRITICAL 9.82026

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sourc…

CVE-2026-33728 ↗CRITICAL 9.82026

dd-trace-java is a Datadog APM client for Java. In versions of dd-trace-java 0.40.0 through prior to 1.60.2, the RMI instrumentation registered a custom endpoint that deserialized incoming data withou…

CVE-2025-12697 ↗LOW 2.22026

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user with maintainer-…

CVE-2025-61667 ↗2025

The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through 7.70.2 exists due to insufficient permis…

…and 10 more