v4.9.6
📦 datadog-sdkView on GitHub →
🐛 3 fixes🔧 3 symbols
Summary
This release includes bug fixes for PyYAML consumers like Airflow, IAST false positive vulnerability reporting, and weak-hash false positives when IAST and the live debugger are enabled.
🐛 Bug Fixes
- bootstrap: keep `yaml`/`_yaml` loaded during module cleanup, fixing an issue that broke PyYAML consumers such as Airflow.
- IAST: Resolved an issue where IAST could report a false positive vulnerability against a request whose input did not actually contain tainted data. Concurrent or still-open requests holding a tainted value could leak its taint into the current request's checks. Queries are now scoped to the calling request's slot.
- Code Security (IAST): Resolved a weak-hash false positive reported on ddtrace's own code when IAST and the live debugger (Symbol Database) are both enabled.