CLEANSTART-2026-OV48766: Datadog dd-trace-py is the Datadog Python APM client

Q: Which package should be treated as affected when triaging this advisory?

The software field identifies cleanstart/litellm-database as the affected package. The title and description refer to Datadog dd-trace-py, so the package identification is inconsistent and should be verified against the referenced advisory records before taking remediation action.

Published Nov 8, 2026

Updated

Security vulnerability affects the litellm-database package. Datadog dd-trace-py is the Datadog Python APM client.

Affected Software

2 affected componentsFixes available

cleanstart/litellm-database<1.105.3-r0

1.105.3-r0

cleanstart/litellm-database<1.106.6-r0

1.106.6-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/litellm-database to a version that resolves this vulnerability.
Fixed in 1.105.3-r0
Upgrade
Upgrade cleanstart/litellm-database to a version that resolves this vulnerability.
Fixed in 1.106.6-r0

Event History

Nov 8, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-116588

Frequently Asked Questions

Which package should be treated as affected when triaging this advisory?

The software field identifies cleanstart/litellm-database as the affected package. The title and description refer to Datadog dd-trace-py, so the package identification is inconsistent and should be verified against the referenced advisory records before taking remediation action.

CLEANSTART-2026-OV48766: Datadog dd-trace-py is the Datadog Python APM client

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which package should be treated as affected when triaging this advisory?

Company

Resources

Contact

Frequently Asked Questions

Which package should be treated as affected when triaging this advisory?