DataDog dd-trace-java

• CVE-2026-50270 High 7.5 dd-trace-java: Improper parsing of W3C baggage headers may lead to DoS 0.8%
• CVE-2026-33728 Critical 9.3 dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution 0.7%