@opentelemetry vulnerabilities
2 published CVEs name @opentelemetry among the affected products.
- Published CVEs
- 2
- Last 12 months
- 2
- Critical
- 0
- Known exploited
- 0
Critical 0High 1Medium 1Low 0Not scored 0
Newest CVEs
- CVE-2026-104872
Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute
open-telemetry · opentelemetry-js-contrib
Medium5.8 - CVE-2026-44902
opentelemetry-js: Prometheus exporter process crash via malformed HTTP request
open-telemetry · opentelemetry-js
High7.5