Dd-trace-java (Datadog) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 302 known versions, newest CVE from 2026-09-14. Vendor: Datadog.

CVEs of Dd-trace-java

• CVE-2026-50270 - CVSS 7.5 (high), 2026-09-14: dd-trace-java is a Datadog APM client for Java. Prior to 1.62.0, W3C baggage extraction does not enforce DD_TRACE_BAGGAGE_MAX_ITEMS, which defaults to 64, or…
• CVE-2026-33728 - CVSS 9.8 (critical), 2026-03-27: dd-trace-java is a Datadog APM client for Java. In versions of dd-trace-java 0.40.0 through prior to 1.60.2, the RMI instrumentation registered a custom…