GHSA-qp9x-wp8f-qgjj

Medium

Advisory

Published 28 May 2026In the index since 8 Sept 2026

tuf has platform-dependent delegation path matching

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
tufpypi	0.12.2, 4.0.0	7.0.0	2

2 by stars

Chart

Latest

Affected images

Radar Score

datadogdatadog-test

1 of the 2 container images this version deploys carry GHSA-qp9x-wp8f-qgjj.

Container image	Digest	Package	Fixed in
datadog/agent :7.22.0	8f20e56b5311	tuf@0.12.2	7.0.0

4,568

datadog-apmfairwinds-incubator

1 of the 1 container images this version deploys carry GHSA-qp9x-wp8f-qgjj.

Container image	Digest	Package	Fixed in
public.ecr.aws/datadog/agent :7.73.0	f4925b15ce94	tuf@4.0.0	7.0.0

2,785

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
datadog/agent :7.22.0	8f20e56b5311	tuf@0.12.2	7.0.0	1
public.ecr.aws/datadog/agent :7.73.0	f4925b15ce94	tuf@4.0.0	7.0.0	1