Deserialization Of Untrusted Data

com.datadoghq:dd-java-agent is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to unsafe deserialization of incoming data by a custom RMI endpoint without applying serialization filters, which allows a network-based attacker to exploit a gadget chain and potentially...

com.datadoghq:dd-java-agent (>=0.1.0, <=0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m1) +1 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m1)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.datadoghq:dd-java-agent =0.1.0, =0.1.1 -...

com.datadoghq:dd-java-agent (>=0.1.0, <=0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m1) +1 more potentially affected by CVE-2024-21733 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m1)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.datadoghq:dd-java-agent =0.1.0, =0.1.1 -...