TI-2022-07587 CVE-2022-23530 · GHSA-78m5-jpmf-ch7v
GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package
Priority MEDIUM 62
GuardDog is a CLI tool to identify malicious PyPI packages.
Datadoghq
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Datadoghq records in CISA KEVNo Datadoghq vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2023-20052 CVE-2023-38704 · GHSA-5r27-rw8r-7967
import-in-the-middle allows unsanitized user controlled input in module generation
Priority MEDIUM 44
import-in-the-middle is a module loading interceptor specifically for ESM modules.
TI-2026-18363 CVE-2026-22871 · GHSA-xg9w-vg3g-6m68
GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
Priority MEDIUM 42
GuardDog is a CLI tool to identify malicious PyPI packages.
TI-2019-02812 CVE-2019-3800 · GHSA-2wpx-p7qg-954w
CF CLI writes the client id and secret to config file
Priority LOW 38
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag.
TI-2022-07588 CVE-2022-23531 · GHSA-rp2v-v467-q9vq
Arbitrary file write when scanning a specially-crafted local PyPI package
Priority LOW 35
GuardDog is a CLI tool to identify malicious PyPI packages.
TI-2026-18362 CVE-2026-22870 · GHSA-ffj4-jq7m-9g6v
GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS
Priority LOW 32
GuardDog is a CLI tool to identify malicious PyPI packages.
TI-2021-04431 CVE-2021-21331 · GHSA-2cxf-6567-7pp6
DataDog API Client contains a Local Information Disclosure Vulnerability
Priority LOW 17
The Java client for the Datadog API before version 1.0.0-beta.9 has a local information disclosure of sensitive information downloaded via the API using the API Client.