Opentelemetry

    Dashboard / Vendors

    Products: 40
    Vulnerabilities: 59
    Known Exploited: 0
    1
    Critical Level Threats
    15
    High Level Threats
    37
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-118259

    opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing

    Last Modified: Oct 28, 2026
    Published: Oct 28, 2026

    CVE-2026-116694

    OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation

    Last Modified: Oct 28, 2026
    Published: Oct 27, 2026

    CVE-2026-114603

    OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api

    Last Modified: Oct 29, 2026
    Published: Oct 22, 2026

    CVE-2026-112006

    OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation

    Last Modified: Oct 19, 2026
    Published: Oct 18, 2026

    CVE-2026-104872

    Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute

    Last Modified: Oct 06, 2026
    Published: Oct 02, 2026
    Items Per Page