Threats tagged 'ghsa-x94g-w73q-hpcw'

A ReDoS vulnerability exists in dd-trace's URL query string obfuscation regex, causing excessive CPU usage when processing crafted inputs. This can stall request processing and lead to denial of service in applications using affected HTTP tracing integrations. The issue affects dd-trace versions >=2.0.0 <5.131.1 and >=6.0.0 <6.20.1. A fixed version is available in 5.131.1 and 6.20.1. A workaround involves setting an updated regex pattern via DD_TRACE_OBFUSCATION_QUERY_STRING_REGEXP and restarting the application.