CVE-2026-44972

GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-readable output without escaping terminal control characters. A malicious package can therefore inject ANSI or OSC escape sequences into analyst terminals or CI logs.

• CWE-116

• https://github.com/DataDog/guarddog/security/advisories/GHSA-m5p4-gvpx-4mvr

Published

May 27, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44967OpenTelemetry-cpp is the C++ implementation of OpenTelemetry…5.3
• CVE-2026-44968dbt-mcp is a Model Context Protocol server for interacting w…6.3
• CVE-2026-44969dbt-mcp is a Model Context Protocol server for interacting w…3.3
• CVE-2026-4497A vulnerability was determined in Totolink WA300 5.2cu.7112_…9.8
• CVE-2026-44970dbt-mcp is a Model Context Protocol server for interacting w…4.3
• CVE-2026-44971GuardDog is a CLI tool to identify malicious PyPI packages. …8.2
• CVE-2026-44973Billy is an interface filesystem abstraction for Go. Prior t…8.1
• CVE-2026-44974@hapi/content provided HTTP Content-* headers parsing. Prior…7.7
• CVE-2026-44975Frappe is a full-stack web application framework. Prior to v…5.3
• CVE-2026-44976Frappe is a full-stack web application framework. Prior to v…5.3
• CVE-2026-44978xrdp is an open source RDP server. Versions 0.10.6 and prior…5.3
• CVE-2026-44979@hapi/wreck is an HTTP client utility. Prior to 18.1.1, when…6.3