DD
Product
dd-trace-java
by DataDog · last CVE Sep 14, 2026
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch

Add dd-trace-java to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33728
9.8
1%
Mar 27
dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution
Affected: >= 0.40.0, < 1.60.3
CVE-2026-50270
7.5
1%
Sep 14
dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS
Affected: < 1.62.0
Showing 2