CVE-2026-116693 - dd-trace: ReDOS in URL query string obfuscation
CVE ID :CVE-2026-116693 Published : Oct. 27, 2026, 9:18 p.m. | 1 hour, 6 minutes ago Description :dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DD_TRACE_OBFUSCATION_QUERY_STRING_REGEXP can perform excessive backtracking on attacker-controlled...