open-telemetry opentelemetry-java vulnerabilities

2 published CVEs name open-telemetry opentelemetry-java among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 0Medium 2Low 0Not scored 0

Newest CVEs

CVE-2026-118259
opentelemetry-java: Quadratic CPU consumption in W3C tracestate parsing
open-telemetry · opentelemetry-java
Medium5.3
CVE-2026-45292
opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation
open-telemetry · opentelemetry-java
Medium5.3

Most common weaknesses