--- title: Public Artifact Vulnerabilities description: >- Look up CVE and vulnerability information for Datadog's publicly available artifacts. breadcrumbs: >- Docs > Reducing Data Related Risks > Security Guides > Public Artifact Vulnerabilities --- > For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt). # Public Artifact Vulnerabilities The Public Artifact Vulnerabilities page lets you view vulnerability and response information for Datadog's publicly available artifacts and libraries. Use it to look up: - Which vulnerabilities affect a given artifact (by image/version) - Which artifacts are affected by a given CVE - Status, justification, impact, and action statements for each vulnerability ## How to access{% #how-to-access %} The Public Artifact Vulnerabilities page is accessible through the Help page under Public Artifact Vulnerabilities. ## Using the page{% #using-the-page %} ### Look up by artifact{% #look-up-by-artifact %} Use the artifact view to see all vulnerabilities for a specific family, image, and version (for example, the Datadog Agent image version 7.52.0). - Family: Choose a category such as Agent platform, APM library injection, Private action runners, Telemetry collectors, Serverless, Private deployments, or Build & CI. Your selection narrows the Image dropdown. - Image: Choose an image from the selected family. The list is built from available public artifacts. - Version: Choose a version of the selected image. Versions are sorted by newest first. The table loads and shows one row per vulnerability affecting that image and version. To filter your current results, enter a keyword in the search box without clicking Find CVE in artifacts. {% image source="https://docs.dd-static.net/images/data_security/public_artifact_vulnerabilities/artifact-view.721834ac1344b0ae96514ea3cf27d4a9.png?auto=format&fit=max&w=850 1x, https://docs.dd-static.net/images/data_security/public_artifact_vulnerabilities/artifact-view.721834ac1344b0ae96514ea3cf27d4a9.png?auto=format&fit=max&w=850&dpr=2 2x" alt="Look up by artifact" /%} **Table columns (by image/version):** | Column | Purpose | | ---------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Severity | Severity of the vulnerability (for example, Critical, High, Medium, Low, and Info). | | Vulnerability | CVE or vulnerability identifier and name. | | Platform | Applicable platforms. Hover over a platform value to see the specific variants it covers, including FIPS and non-FIPS builds. | | Status | Current status: for example, Not affected, Affected, Fixed, and Under investigation. | | Additional Information | More information on the status of the CVE and justification of the status if needed. For example, if the status is component_not_present, this column explains why the CVE does not affect the artifact and how that conclusion was reached. Some statuses, such as Under investigation, do not have additional information because the impact is still being analyzed. | ### Look up by CVE{% #look-up-by-cve %} Use the CVE view to find which artifacts and versions are affected by specific vulnerabilities, and the status for each. 1. In the search box at the top of the table, enter one or more CVE IDs (for example, `CVE-2024-1234` or `CVE-2024-1234, CVE-2024-5678` for multiple). 1. Click Find CVE in artifacts. The table switches to CVE mode and shows one row per CVE, artifact, and version combination. To filter your current results, enter a keyword in the search box without clicking Find CVE in artifacts. {% image source="https://docs.dd-static.net/images/data_security/public_artifact_vulnerabilities/cve-view.f106d07e66408325387d8ac26ba8ad85.png?auto=format&fit=max&w=850 1x, https://docs.dd-static.net/images/data_security/public_artifact_vulnerabilities/cve-view.f106d07e66408325387d8ac26ba8ad85.png?auto=format&fit=max&w=850&dpr=2 2x" alt="Look up by CVE" /%} **Table columns (by CVE):** | Column | Purpose | | ---------------------- | ----------------------------------------------------------------------------------------------------------------------------- | | CVE | The CVE ID. | | Artifact Name | Name of the artifact (for example, agent, library name). | | Version | Version of the artifact. | | Platform | Applicable platforms. Hover over a platform value to see the specific variants it covers, including FIPS and non-FIPS builds. | | Status | Status for this CVE/artifact/version (for example, Not affected, Affected, Fixed, and Under investigation). | | Additional Information | More information on the status of the CVE and justification of the status if needed. | ## Available artifacts (images){% #available-artifacts-images %} The **Image** dropdown is populated from the list of tracked public artifacts. Public Artifact Vulnerabilities supports the **latest 10 versions** of tracked public images. If an expected artifact is missing, contact [Datadog Support](https://docs.datadoghq.com/help) to request that it be added. ## Options and actions on the page{% #options-and-actions-on-the-page %} | Option or action | Description | | ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | | Search / global filter | Filter table rows by any text. In "by image/version" mode, the same search box is used before clicking Find CVE in artifacts to run a CVE lookup. | | Find CVE in artifacts | Runs a CVE lookup using the current search box value (supports comma-separated CVE IDs). Only relevant when you want to look up by CVE. | | Pagination | Use the table pagination to move through large result sets (for example, 50 rows per page). | | Resizable columns | You can resize column widths for readability. | ## Further reading{% #further-reading %} Additional helpful documentation, links, and articles: - [Reduce CVE noise with OpenVEX assessments in Datadog](https://www.datadoghq.com/blog/datadog-public-artifact-vulnerabilities-openvex/)