https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 10:09:42 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349478 EUVD-2026-349478 https://cve.radiocsirt.org/vuln/euvd-2026-349478 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47364 <p>In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user&#39;s Datadog UUID, with no user-facing opt-out. Impact: The Datadog user UUID and crash data are visible within Firebase Crashlytics. This UUID is not identifying outside Datadog&#39;s own systems.</p> <p>In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user&#39;s Datadog UUID, with no user-facing opt-out. Impact: The Datadog user UUID and crash data are visible within Firebase Crashlytics. This UUID is not identifying outside Datadog&#39;s own systems.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47364 https://cve.radiocsirt.org/vuln/ghsa-9pjj-6mjx-mcc6 <p>On every successful login, the Datadog Android application calls FirebaseCrashlytics.setUserId with the signed-in user&#39;s Datadog UUID — a stable per-user identifier that is meaningful inside Datadog. This associates the Datadog user UUID with the device&#39;s Firebase installation ID on Google&#39;s backend. Separately, uncaught exceptions are forwarded to Firebase Crashlytics via recordException, attaching stack traces (which may include internal class names, package names, in-flight data referenced by crash frames, and any breadcrumbs) to the same user UUID. No visible consent gate or opt-out for Crashlytics tagging was identified in the reviewed code paths. No email, name, or organization data is forwarded to Crashlytics in the reviewed paths.</p> <p>On every successful login, the Datadog Android application calls FirebaseCrashlytics.setUserId with the signed-in user&#39;s Datadog UUID — a stable per-user identifier that is meaningful inside Datadog. This associates the Datadog user UUID with the device&#39;s Firebase installation ID on Google&#39;s backend. Separately, uncaught exceptions are forwarded to Firebase Crashlytics via recordException, attaching stack traces (which may include internal class names, package names, in-flight data referenced by crash frames, and any breadcrumbs) to the same user UUID. No visible consent gate or opt-out for Crashlytics tagging was identified in the reviewed code paths. No email, name, or organization data is forwarded to Crashlytics in the reviewed paths.</p> https://cve.radiocsirt.org/vuln/ghsa-9pjj-6mjx-mcc6