Skip to content
OpenAdvisories

Product · Datadog

dd-trace-java

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-50270

    dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS

    dd-trace-java is a Datadog APM client for Java. Prior to 1.62.0, W3C baggage extraction does not enforce DD_TRACE_BAGGAGE_MAX_ITEMS, which defaults to 64, or DD_TRACE_BAGGAGE_MAX_BYTES, which defaults to 8192, although those limits apply during baggage inject…

    Datadog com.datadoghq dd-trace-java dd-java-agent Maven