CVE-2026-59949 in at.yawk.lz4/lz4-java dependency

[amardeep2006]

Tracer Version(s)

1.64.2

Java Version(s)

21

JVM Vendor

Eclipse Adoptium / Temurin

Bug Report

our secirity tool wiz has flagger datadog agent jar for https://advisories.gitlab.com/maven/at.yawk.lz4/lz4-java/CVE-2026-59949/ .

Please bump up the lz4-java to 1.11.1 in dependencies.

Expected Behavior

vulnerability scan must be clean.

Reproduction Code

No response

[vandonr]

thanks for the headsup, this will be part of the next major release