Change8

v4.9.6

📦 datadog-sdkView on GitHub →
🐛 3 fixes🔧 3 symbols

Summary

This release includes bug fixes for PyYAML consumers like Airflow, IAST false positive vulnerability reporting, and weak-hash false positives when IAST and the live debugger are enabled.

🐛 Bug Fixes

  • bootstrap: keep `yaml`/`_yaml` loaded during module cleanup, fixing an issue that broke PyYAML consumers such as Airflow.
  • IAST: Resolved an issue where IAST could report a false positive vulnerability against a request whose input did not actually contain tainted data. Concurrent or still-open requests holding a tainted value could leak its taint into the current request's checks. Queries are now scoped to the calling request's slot.
  • Code Security (IAST): Resolved a weak-hash false positive reported on ddtrace's own code when IAST and the live debugger (Symbol Database) are both enabled.

Affected Symbols