DataDog guarddog

• CVE-2026-44971 High 8.2 GuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration 0.2%
• CVE-2026-44972 Medium 5.0 GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content 0.1%
• CVE-2026-22871 High 8.7 GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE 1.1%
• CVE-2026-22870 High 7.1 GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS 0.5%
• CVE-2022-23531 Medium 5.8 Arbitrary file write when scanning a specially-crafted local PyPI package 0.7%
• CVE-2022-23530 Medium 5.8 GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package 0.8%