Out-of-Bounds The advisory has been revoked - it doesn't affect any version of package datadog-agent-fips-7-s6-overlay (opens in a new tab)

Threat Intelligence

0.65% (47^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-MINIMOSLATEST-DATADOGAGENTFIPS7S6OVERLAY-16338983
published2 May 2026
disclosed8 Apr 2026

Report a new vulnerability Found a mistake?

Introduced: 8 Apr 2026

CVE-2026-39892 (opens in a new tab) CWE-119 (opens in a new tab)

Amendment

The Minimos security team deemed this advisory irrelevant for Minimos:latest.

NVD Description

Note: Versions mentioned in the description apply only to the upstream datadog-agent-fips-7-s6-overlay package and not the datadog-agent-fips-7-s6-overlay package as distributed by Minimos.

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7.