Package
datadog-agent-7.73
Component
urllib3
Latest update
Fixed version
7.73.3-r13
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
7.73.3-r13Status
Impact
Vulnerability detected in /opt/datadog-agent/embedded/lib/python3.13/site-packages/pip/_vendor/
are CVEs exist in pip's internally vendored dependencies, which cannot be safely patched or
removed because the Datadog Agent requires pip at runtime for the datadog-agent integration install/remove/freeze commands,
and pip intentionally vendors urllib3 1.26.x since urllib3 2.x introduces breaking API changes that may break pip's functionality.
Upstream will need to update pip version or its vendord dependencies to fix this CVEs
Status