CLAIM-2026-09-29-03
Datadog Security Labs discovered the flaw on 11 August 2026 and reported it through GitHub Security Advisories; the fix was merged and v1.18.22 released on 24 August 2026; public disclosure followed on 24 September 2026.
Why it matters
The fix was available for a month before disclosure. That gap is what makes the propagation figure meaningful rather than alarming.
Sources
- datadogsecu2026discoveri