GHSA-qvgg-r6rq-vwfx: datadog/dd-trace Circumvents open_basedir INI directive

low Affects datadog/dd-trace. Feed 2026.10.29.4, updated 2026-10-29; published ; advisory modified .

datadog/dd-trace Circumvents open_basedir INI directive

Package
datadog/dd-trace Composer
Affected versions
>=0.30.0 and <0.30.2
Fixed in
0.30.2
Severity
low
Exploitation
not on CISA KEV
Published
2024-05-15
Source
osv.dev

References

NVD recorddatadog/dd-trace advisories

Am I affected?

Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# PHP projects (recommended)
composer require --dev phpwarden/phpwarden
# then
vendor/bin/phpwarden deps composer.lock

# or, without Composer
pipx install phpwarden   &&   phpwarden deps composer.lock

Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command

Install docs   How findings are ranked

Related advisories