VYPR

Dd Trace Java

by Datadog

CVEs (1)

  • CVE-2026-33728CriMar 27, 2026
    risk 0.57cvss 9.8epss 0.01

    dd-trace-java is a Datadog APM client for Java. In versions of dd-trace-java 0.40.0 through prior to 1.60.2, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. On JDK version 16 and earlier, an attacker…