@opentelemetry vulnerabilities
2 published CVEs name @opentelemetry among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-104872
Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute
open-telemetry · opentelemetry-js-contrib
Medium5.8 - CVE-2026-44902
opentelemetry-js: Prometheus exporter process crash via malformed HTTP request
open-telemetry · opentelemetry-js
High7.5