# What changed in dd-trace

> 1 change in dd-trace 5 from its official release notes, upgrade guides and advisories: 1 security. Each one cited. Sources checked 2026-10-18. HTML: https://unstale.sh/npm/dd-trace/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## dd-trace 5

### Security

- dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS (5.100.0) — [security advisory](https://github.com/advisories/GHSA-WXQQ-GCQ8-C443)