—
GO-2026-6000
Improper parsing of W3C baggage headers may lead to DoS in github.com/DataDog/dd-trace-go
Quick fix
GO-2026-6000 — github.com/DataDog/dd-trace-go/v2: upgrade to the fixed version with the command below.
go get github.com/DataDog/dd-trace-go/v2@v2.8.1Details
Improper parsing of W3C baggage headers may lead to DoS in github.com/DataDog/dd-trace-go
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/DataDog/dd-trace-go
Introduced in:
0 No fixed version published yet for github.com/DataDog/dd-trace-go (go modules). Pin to a known-safe version or switch to an alternative.
Go / github.com/DataDog/dd-trace-go/v2
Introduced in:
0 Fixed in: 2.8.1 Fix
go get github.com/DataDog/dd-trace-go/v2@v2.8.1