{"id":"ghsa-ghsa-p3m5-h5v9-vqj6","seq":1708791,"kind":"advisory","title":"Datadog dd-trace-py: IAST instrumentation can lead to application DOS","url":"https://github.com/advisories/GHSA-p3m5-h5v9-vqj6","permalink":"https://vulnpulse.app/items/ghsa-ghsa-p3m5-h5v9-vqj6","summary":"影響: pip:ddtrace >= 3.13.0, < 4.15.5 → 4.15.5\nA flaw in dd-trace-py’s IAST instrumentation can cause the Python application process to terminate unexpectedly when processing certain attacker-controlled input. Only applications with IAST enabled are affected. IAST is disabled by default. Details The affected IAST string-processing instrumentation does not properly handle certain internal errors, allowing an error to terminate the application process. Exploitation requires IAST to be enabled and application code to perform an affected string…","severity":"high","techs":["python","datadog"],"cves":["CVE-2026-116589"],"tags":["GHSA-p3m5-h5v9-vqj6","ddtrace"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-27T15:37:24.000Z","fetched_at":"2026-10-27T21:03:52.214Z"}