Homepage

Inefficient Regular Expression Complexity The advisory has been revoked - it doesn't affect any version of package datadog-agent-fips  (opens in a new tab)

Threat Intelligence

EPSS
1.39% (69th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CHAINGUARDLATEST-DATADOGAGENTFIPS-14912688
  • published12 Jan 2026
  • disclosed7 Jul 2024
Report a new vulnerability Found a mistake?

Introduced: 7 Jul 2024

CVE-2024-3651  (opens in a new tab)
CWE-1333  (opens in a new tab)

Amendment

The Chainguard security team deemed this advisory irrelevant for Chainguard:latest.

NVD Description

Note: Versions mentioned in the description apply only to the upstream datadog-agent-fips package and not the datadog-agent-fips package as distributed by Chainguard.

A vulnerability was identified in the kjd/idna library, specifically within the idna.encode() function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the idna.encode() function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.