CVE-2026-50276 (datadog): dd-trace-rb - Improper parsing of W3C baggage headers may lead to DoS
21-Jul-2026 1
Originally appeared on RubySec.### Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DD_TRACE_BAGGAGE_MAX_ITEMS (default 64) and DD_TRACE_BAGGAGE...
CVE-2026-50276 (datadog): dd-trace-rb - Improper parsing of W3C baggage headers may lead to DoS #ruby #rubydeveloper #rubyonrails #ruby #rubyonrails #programming #webdev #cve-2026-50276 #(datadog): https://rubyonrails.ba/link/cve-2026-50276-datadog-dd-trace-rb-improper-parsing-of-w3c-baggage-headers-may-lead-to-dos
